NET Framework 3.5 218
Simpli?¬?ed Use of Personal Cards 219
Simplify Import of Managed Cards 220
Better Communication to the User 220
Summary 221
xii Contents
4 CARDSPACE IMPLEMENTATION 223
Using CardSpace in the Browser 224
Understanding the Information Card Browser
Extension 224
How Are the Extension Properties Used? 228
Scripting CardSpace 232
Processing the Token 238
Accepting Personal Cards at a Website 243
Accepting Managed Cards at a Website 244
Auditing and Nonauditing IPs 246
Federation with CardSpace 248
CardSpace and Windows Communication
Foundation 252
Windows Communication Foundation 252
Adding CardSpace to WCF 255
Calling CardSpace from WCF 256
Decrypting the Token 258
Verifying the Token 260
Processing Claims 260
Additional Policy Options 261
CardSpace Without Web Services 262
Manage CardSpace 264
Import a CardSpace File 264
Get a Token from CardSpace 264
Get a Browser Token from CardSpace 267
Summary 268
5 GUIDANCE FOR A RELYING PARTY 269
Deciding to Be a Relying Party 270
Putting CardSpace to Work 274
Preparation 275
Database Changes 276
Examining the Authentication Experience 277
Contents xiii
Developing the New Authentication Experience 278
Signing In 285
Handling the Unknown Card 286
Associating an Information Card with an Account 288
Creating a New Account 288
Recovering an Account 291
Prompting the User to Use Information Cards 294
Account Maintenance 297
Privacy and Liability 299
Summary 302
Part III PRACTICAL CONSIDERATIONS
6 IDENTITY CONSUMERS 305
Common Misconceptions about Becoming an
Identity Provider 306
Criteria for Selecting an Identity Provider 309
Managed Cards Pro?¬?les 309
Identity Provider Quali?¬?cations 312
Relying on an IP 315
Bene?¬?ts of Using an IP 316
Reaching an Agreement with the Identity Provider 318
Migration Issues 320
Summary 321
7 IDENTITY PROVIDERS 323
Uncovering the Rationale for Becoming an
Identity Provider 324
Managing Identities for Your Organization 325
Managing Identities Used by Other Organizations 327
Providing Claims-Based Services 331
xiv Contents
Internet Commerce 333
Providing Strong Authentication to Relying Parties 333
What Does an Identity Provider Have to Offer? 334
Understanding Your Data 335
Identity Provider Reputation 336
Walking a Mile in the User??™s Shoes 338
Roaming with Information Cards 340
An Organization??™s Identity 341
Summary 342
Index 343
Foreword
As this book explains, the Internet was built without any way of
knowing who you are connecting to.
Pages:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25