acs Wiki Rss Feed

Updated Wiki: Documentation

asmalser — Thu, 06 Dec 2012 00:47:15 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Home

asmalser — Thu, 06 Dec 2012 00:46:53 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Home

asmalser — Wed, 05 Dec 2012 22:41:54 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Documentation

asmalser — Wed, 05 Dec 2012 22:41:46 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Documentation

asmalser — Wed, 05 Dec 2012 22:41:37 GMT

[Moved] ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Home

asmalser — Wed, 05 Dec 2012 22:41:24 GMT

[Moved] ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Documentation

asmalser — Wed, 05 Dec 2012 22:40:56 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

Updated Wiki: Documentation

asmalser — Wed, 05 Dec 2012 22:40:29 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

ACS Code Samples on MSDN
ACS Documentation on MSDN
Windows Azure Security Forum (for questions about ACS)

Updated Wiki: Home

asmalser — Wed, 05 Dec 2012 22:38:02 GMT

ACS 2.0 Samples and Documentation

Notice: All sample code and documentation for Windows Azure Access Control Service 2.0 has been moved to MSDN.

Please use the following links to access:

New Comment on "ACS Windows Phone Sample"

RHAD — Mon, 30 Jul 2012 14:25:27 GMT

Unfortunately it seems that all ACS related code samples are not working without heavy debugging. Also this code doesn't run as said. I see the identity providers, but after clicking one of them I get a white screen where the AccessControlServiceSignIn.xaml control is. So this code is of no use to me.

Updated Wiki: Documentation

asmalser — Sat, 21 Apr 2012 00:56:33 GMT

Introduction

The Windows Azure AppFabric Access Control Service (ACS) makes it easy to authenticate and authorize users of your web sites and services. ACS integrates with popular web and enterprise identity providers, is compatible with most popular programming and runtime environments, and supports many protocols including: OAuth, OpenID, WS-Federation, and WS-Trust.

On this site you will find code samples and documentation for intergrating ACS with your relying party applications. For comprehensive product documentation on ACS 2.0, see the Access Control Service Documentation on MSDN.

Prerequisites: Describes what's required to get up and running with ACS 2.0

Getting Started: Walkthrough a simple end-to-end web application scenario

Samples: Descriptions and Readmes for the ACS Samples

Key Features

Integrates with Windows Identity Foundation and tooling (WIF)
Out-of-the-box support for popular web identity providers including: Windows Live ID, Google, Yahoo, and Facebook
Out-of-the-box support for Active Directory Federation Server v2.0
Support for OAuth 2.0 (draft 10), WS-Trust, and WS-Federation protocols
Support for the SAML 1.1, SAML 2.0, and Simple Web Token (SWT) token formats
Integrated and customizable Home Realm Discovery that allows users to choose their identity provider
An OData-based Management Service that provides programmatic access to ACS configuration
A Web Portal that allows administrative access to ACS configuration

Platform Compatibility

ACS is compatible with virtually any modern web platform, including .NET, PHP, Python, Java, and Ruby. For a list of .NET system requirements, see Prerequisites.

Core Scenario

Most of the scenarios that involve ACS consist of four autonomous services:

Relying Party Application (RP): Your web site or service

Client: The browser or application that is attempting to gain access to the Relying Party Application

Identity Provider (IdP): The site or service that can authenticate the Client

ACS: The partition of ACS that is dedicated to the Relying Party Application

The core scenario is similar for web services and web sites, though the interaction with web sites utilizes the capabilities of the browser.

Web Site Scenario

This web site scenario is shown below:

The Client (in this case a browser) requests a resource at the RP. In most cases, this is simply an HTTP GET.
Since the request is not yet authenticated, the RP redirects the Client to the correct IdP. The RP may determine which IdP to redirect the Client to using the Home Realm Discovery capabilities of ACS.
The Client browses to the IdP authentication page, and prompts the user to login.
After the Client is authenticated (e.g. enters credentials), the IdP issues a token.
After issuing a token, the IdP redirects the Client to ACS.
The Client sends the IdP issued token to ACS.
ACS validates the IdP issued token, inputs the data in the IdP issued token to the ACS rules engine, calculates the output claims, and mints a token that contains those claims.
ACS redirects the Client to the RP.
The Client sends the ACS issued token to the RP.
The RP validates the signature on the ACS issued token, and validates the claims in the ACS issued token.
The RP returns the resource representation originally requested in (1).

Web Service Scenario

The core web service scenario is shown below. It assumes that the web service client does not have access to a browser and the Client is acting autonomously (without a user directly participating in the scenario).

The Client logs in to the IdP (e.g. sends credentials)
After the Client is authenticated, the IdP mints a token.
The IdP returns the token to the Client.
The Client sends the IdP-issued token to ACS.
ACS validates the IdP issued token, inputs the data in the IdP issued token to the ACS rules engine, calculates the output claims, and mints a token that contains those claims.
ACS returns the ACS issued token to the Client.
The Client sends the ACS issued token to the RP.
The RP validates the signature on the ACS issued token, and validates the claims in the ACS issued token.
The RP returns the resource representation originally requested in (1).

New Comment on "Samples"

Streaky88 — Tue, 10 Jan 2012 18:10:42 GMT

I need to try to add ACS to a WCF RIA services application. There looks to be no information anywhere on even if this is possible. We have tried to follow examples for WCF and get close but really need some direction if this is even possible before we continue.

New Comment on "Samples"

LaStool — Fri, 28 Oct 2011 18:12:02 GMT

I am having trouble tracking down the actual sample for OAuth 2.0 Delegation. Does anyone know where this sample can be found? I see the instructions on MSDN on how to run the sample, but I haven't been able to track down the sample code itself.

New Comment on "WCF Federated Authentication"

krist00fer — Thu, 13 Oct 2011 11:25:51 GMT

Warning! Certificates Expired - According to the documentation found here http://msdn.microsoft.com/en-us/library/hh204521.aspx you will get an ACS50005 "Token encryption is required but no encrypting certificate is configured for the relying party." In the sample, the certificates ACS2SigningCertificate and WCFService Certificate has expired and therefore you'll get that error if you follow the example. Please generate your new certificates using the instructions found here http://msdn.microsoft.com/en-us/library/gg185932.aspx

New Comment on "MVC3 Custom Login"

mercjr — Thu, 22 Sep 2011 19:19:23 GMT

i see the sample uses <httpRuntime requestValidationMode="2.0"/>. I am able to get my code to work with downgraded validation as well. Any idea why creating a custom validator with <httpRuntime requestValidationType=""/> doesnt work with MVC3 but it does with webforms? The kind of request validator i am talking about is described here: http://www.leastprivilege.com/WIFASPNET40AndRequestValidation.aspx

Updated Wiki: Samples

asmalser — Fri, 09 Sep 2011 19:48:57 GMT

Samples

Below you will find a listing of the developer samples that demonstrate how to use the Access Control Service. These samples are categorized by the type of application that is integrating with ACS: websites, web services, as well as management.

Be sure to check the Prerequisites before starting the samples. All of these samples require the .NET Framework 4.0, Visual Studio 2010, and an account on http://windows.azure.com.

Websites: This set of samples illustrate how to integrate ACS into websites

ASP.NET Simple Forms: An ASP.NET forms sample that uses the ACS hosted login page and blanket protection for the website

ASP.NET Simple MVC2: An ASP.NET MVC 2 sample that uses the ACS hosted login page and blanket protection for the website. This sample also includes custom error handling.

ASP.NET Custom MVC3: An ASP.NET MVC 3 sample that features a custom self-hosted login page.

WordPress Plugin: An ACS plugin for the WordPress blog tool and publishing platform, written in PHP.

Web Services: Describes how to integrate ACS into web services

ASP.NET Simple Service: A very simple ASP.NET web service that uses ACS for authentication and simple authorization

WCF Username Authentication: A very simple WCF service that authenticates with ACS using a username and password

WCF Certificate Authentication: A very simple WCF service that authenticates with ACS using a certificate

WCF Federated Authentication: A very simple WCF service that authenticates with ACS using a token received from Active Directory Federation Services 2.0

ACS Windows Phone Sample: Demonstrates how a Windows Phone 7 app can call a service protected by ACS.

OAuth 2.0 Certificate Authentication: Demonstrates how to authenticates with ACS using OAuth 2.0 and X.509 certificates

OAuth 2.0 Delegation: Demonstrates OAuth 2.0 delegated access for REST web services using an extension for Windows Identity Foundation

Management Service: Illustrates how to use the ACS management service

Management Service: A very simple set of client applications that use the ACS Management Service

New Comment on "Samples"

alikl — Fri, 02 Sep 2011 14:48:42 GMT

Look at this one - How To: Authenticate to a REST WCF Service Deployed to Windows Azure Using ACS http://msdn.microsoft.com/en-us/library/hh289317.aspx Helps?

New Comment on "Samples"

kamalssource — Fri, 02 Sep 2011 14:33:51 GMT

any implementation showing ACS 2.0 in action with cloud based WCF service (WCF in web role)? How to configure such a service to expect username and password from consuming client

New Comment on "ASP.NET Simple Forms"

tomleetaiwan — Wed, 13 Jul 2011 23:32:10 GMT

I find the reason, just miss typing the name of ACS Service Namespace.

New Comment on "ASP.NET Simple Forms"

tomleetaiwan — Wed, 13 Jul 2011 10:06:38 GMT

Hi, I follow these page instruction and download the sample, when I run the sample I get an error message: HTTP Error Code: 400 "ACS20000: An error occurred while processing a WS-Federation sign-in request." , any suggestion can help me find out the reason?

acs Wiki Rss Feed

Updated Wiki: Documentation

ACS 2.0 Samples and Documentation

Updated Wiki: Home

ACS 2.0 Samples and Documentation

Updated Wiki: Home

ACS 2.0 Samples and Documentation

Updated Wiki: Documentation

ACS 2.0 Samples and Documentation

Updated Wiki: Documentation

[Moved] ACS 2.0 Samples and Documentation

Updated Wiki: Home

[Moved] ACS 2.0 Samples and Documentation

Updated Wiki: Documentation

ACS 2.0 Samples and Documentation

Updated Wiki: Documentation

ACS 2.0 Samples and Documentation

Updated Wiki: Home

ACS 2.0 Samples and Documentation

New Comment on "ACS Windows Phone Sample"

Updated Wiki: Documentation

Introduction

Contents

Key Features

Platform Compatibility

Core Scenario

Web Site Scenario

Web Service Scenario

New Comment on "Samples"

New Comment on "Samples"

New Comment on "WCF Federated Authentication"

New Comment on "MVC3 Custom Login"

Updated Wiki: Samples

Samples

New Comment on "Samples"

New Comment on "Samples"

New Comment on "ASP.NET Simple Forms"

New Comment on "ASP.NET Simple Forms"