Slide 1

Slide 2

Slide 3

Solution Architect @ SusQtech (Winchester, VA) SharePoint MVP since 2007 Working with SharePoint since 2001 Work on all types of deployments Dream about SharePoint.Honestly sometimes I do I like to hack stuff

Slide 4

Slide 5

Slide 6

Slide 7

Slide 8

1.Resource Requested 2.AuthN Request / Redirect 3.AuthN Request 4.Security Token 5.Security Token Request 6.Service Token 7.Resource Request w/Service Token 8.Resource Sent Identity Provider Security Token Service aka IP-STS SharePoint aka RP

Slide 9

Slide 10

Slide 11

Identity Issuer Claims

Slide 12

Transformation Augmentation In Out In Out Identity Platform Sent Claims Federation Gateway SharePoint SP Security Site Access Add Claims Claims Mappings

Slide 13

Slide 14

Slide 15

i:0#.f|membershipprovider|user Identity Claim Reserved Forms Type: String User Login Name Account Provider Name

Slide 16

i:0#.w|domain\user Identity Claim Reserved Windows Type: String User Login Name Account

Slide 17

Provider Name i:05.t|azure|me@email.com Identity Claim Reserved Trusted Identity Type: String Email Type Email

Slide 18

Slide 19

Slide 20

Slide 21

1.Resource Requested 2.Detects Hosted App 3.Signed Token Returned 4.iFrame Rendered with Signed Token 5.Request Made for Hosted Web App 6.Context Token Validation / Client Secret Issued 7.Cache Access Token 8.Token Issued with Code / Resource Retrieved STS (Azure ACS) SharePoint Hosted Web

Slide 22

Slide 23

Slide 24

Slide 25

Slide 26

Slide 27

Slide 28

Slide 29

Slide 30

Slide 31

Slide 32

Slide 33

Slide 34

Slide 35

Slide 36

Slide 37

Slide 38

Slide 39

MySPC

Slide 40