[does this sound like common sense to you? Fantastic, please skip this post in its entirety. But lately I am stumbling in people confused about this every day, hence I going to write a post and start pointing them here] Let me get this straight right away: “URL” and “URI” are NOT interchangeable…
If you are already using the developer preview of Windows Azure Active Directory, today we published a list of upcoming breaking changes you need to be aware of if you want your code to keep working. If you are not using Windows Azure Active Directory yet, what are you doing here? Go get…
If you guys had a chance of seeing the Windows Azure AD session at //BUILD, or more recently at the P&P Symposium, you already know that the previews of ASP.NET Tools Fall update included a feature to easily configure a Web application to use Windows Azure AD; it is what added the “Enable…
[if there was ever a post where you NEED to understand my post disclaimers, this is it. This is my PERSONAL blog, what I write here are MY OWN personal elucubrations, largely written on nights and weekends instead of engaging in healthy activities, and is by no mean official guidance. Please refer to…
In short: we just updated the list of claims we issue from Windows Azure AD to provide the UPN of the user (“user@domain”) in the Name claim (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name). If it is present, WIF automatically assigns the value of the Name claim to the Name property of the Principal in the current thread. Why…
Writing this blog post or dowloading Adera Episode 3? Why do I even ask, I already know the answer 🙂 Today I want to tell about one of the patterns behind Windows Azure Active Directory. I call it the multitenant STS pattern, which is a pretty descriptive name IMO and seem to have…
It’s official: I am getting old. I was ab-so-lu-te-ly convinced I already blogged about this, but after the nth time I got asked about this I came to find the link to the post only to find pneumatic vacuum in its place. No joy on the draft folder either… oh well, this won’t…
![Group & Role Claims: Use the Graph API to Get Back IsInRole() and [Authorize] in Windows Azure AD Apps](https://www.cloudidentity.com/blog/wp-content/uploads/2013/01/3618.image_5F00_61B0D80F.png){kind=small}
Welcome to a new installment of the “addressing the most common questions about Windows Azure AD development” series! This time I am going to tackle one question that I know is very pressing for many of you guys: How do I get role and group membership claims for users signing in via Windows…
After much abstract thought (very well received! thank you! :-)) it’s time to get back to some good old C#, or you’ll think I’ve gone soft 🙂 Say that you have a Web application protected via claims-based identity. Say that your application occasionally reaches out to a backend service, and that the service…