identity as a collaborative foundation

2

3

Who are you?What are you allowed to

do?How should your

experience be personalized?

How do I get apps that are provably

securable and manageable?

How do I get apps that can work together in an architecture?

The hardest jobof app developer…

The hardest job of IT architect

Hardest job of compliance officer: common Hardest job of compliance officer: common policy across silospolicy across silos

Reusable Claims-Based Identity

7

RelationshipClaims

Provider

2. Get claims 3. Send

claims

1. Require claims

SUBJECT

Application(requires Claims)

11

Claims

Microsoft Services Identity Backbone

Database

Directory

EnterpriseApplicatio

nFederation Framework

FederationServer

FederationServer

Enterprise Identity Backbone

Claims

Directory

IdentityStore

CloudApplicatio

nClaimsAPI

ClaimsService

ClaimsService

Cloud Service Identity Backbone

Database

ClaimsService

13

Reusable Claims-Based Identity Microsoft Confidential 14

Reusable Claims-Based Identity Microsoft Confidential 15

Identity Provider

Name: Alice Smith

Address: 1234 Pine, Seattle, WA

D.O.B: 23-11-1955

Name: Alice Smith

Address: 1234 Pine, Seattle, WA

D.O.B.: 23-11-1955 Relying Party

Identity Provider

Relying Party

Prove that you are

over 21 and from WA

Name: Alice Smith

Address: 1234 Pine, Seattle, WA

D.O.B: 23-11-1955

Which adult

from WA is this?

Over-21 proof

?

eeIDID

Birth certificate RP

20

eeIDID

Dating site RP

22

23