Claims Based Authentication Using ADFS 2.0 Presented By: Shannon Bray

Embed Size (px)

Citation preview

  • Slide 1
  • Claims Based Authentication Using ADFS 2.0 Presented By: Shannon Bray
  • Slide 2
  • MCT, MCPD, MCITP, MCTS, MCAD, MCDBA MCM Candidate (Oct. 2010 Rotation) Technical Architect Planet Technologies Colorado SharePoint Users Group (COSPUG) Twitter:@NoIdentity29 Email:[email protected]
  • Slide 3
  • Clayton Cobb MVP, MCITP, MCTS Technical Architect Planet Technologies Colorado SharePoint Users Group (COSPUG) Twitter:@Warrtalon Email:[email protected]
  • Slide 4
  • Agenda Introduction to CBA How does ADFS 2.0 Come Into Play? Farm Configurations Step by Step Common Pitfalls Questions and Answers
  • Slide 5
  • What is CBA? Geneva is Microsofts next generation identity and access management platform built on Active Directory directory services. Geneva provides claims-based access and single sign-on for on-premises and cloud-based applications in the enterprise, across organizations, and on the Web. Geneva leverages claims which describe identity attributes and can be used to drive application and other system behaviors with an open architecture that implements the industrys shared Identity Metasystem vision.
  • Slide 6
  • Benefits Supports Existing Identity Infrastructure Active Directory LDAP, SQL Federation Gateways WebSSO and Identity Management Systems Enables Automatic, Secure Identity Delegation Supports no credential connections to external web services Consistent API to develop SharePoint Solutions
  • Slide 7
  • Identity What is Identity? Set of attributes to describe a user such as name, e-mail, age, group membership, etc. What is a Claim? Some authority that claims to have the attribute and its value
  • Slide 8
  • User Identity is a set of Claims Why we say claim and not attribute? FaceBook & DOL have the age attribute FaceBook claims that I am 18, while DOL claims I am 38. If a claim was based on age, which would you trust?
  • Slide 9
  • User Identity is a set of Claims Why we say claim and not attribute? FaceBook & DOL have the age attribute FaceBook claims that I am 18, while DOL claims I am 38. If a claim was based on age, which would you trust?
  • Slide 10
  • Identity Normalization NT Token SAML 1.1 ASP.NET SAML Token (CBA) SP USER Classic Claims NT Token
  • Slide 11
  • The Authentication Process
  • Slide 12
  • How does ADFS 2.0 Come Into Play?
  • Slide 13
  • Farm Configurations Internal (Corp) ADFS 2.0 AD w/ DNS SharePoint 2010 SQL External ADFS 2.0 AD w/ DNS
  • Slide 14
  • Step by Step ADFS 2.0 Wizard Server Certificates
  • Slide 15
  • Step by Step - Demo
  • Slide 16
  • Common Pitfalls Kerberos SPTITI ADFS 2.0 Settings Not So Random Errors
  • Slide 17
  • The Short Story CBA ADFS 2.0 Common Pitfalls http://shannonbray.wordpress.com
  • Slide 18
  • Questions and Answers?
  • Slide 19
  • THANK YOU!!!