Posted by: kurtsh | December 17, 2011

DOWNLOAD: Free eBook “A Guide to Claims-Based Identity and Access Control, Second Edition”

We just released a new 365 page eBook from the Patterns and Practices series:  “A Guide to Claims-Based Identity and Access Control, Second Edition”.

imageAs an application designer or developer, imagine a world in which you don’t have to worry about authentication. Imagine instead that all requests to your application already include the information you need to make access control decisions and to personalize the application for the user.

In this world, your applications can trust another system component to securely provide user information, such as the user’s name or email address, a manager’s email address, or even a purchasing authorization limit. The user’s information always arrives in the same simple format, regardless of the authentication mechanism, whether it’s Microsoft® Windows® integrated authentication, forms-basedauthentication in a web browser, an X.509 client certificate, or something more exotic. Even if someone in charge of your company’ssecurity policy changes how users authenticate, you still get the information, and it’s always in the same format.

This is the utopia of claims-based identity that A Guide to Claims-Based Identity and Access Control describes. As you’ll see, claims provide an innovative approach for building applications that authenticate and authorize users.

Who This Book Is For
This book gives you enough information to evaluate claims-based identity as a possible option when you’re planning a new application or making changes to an existing one. It is intended for any architect, developer, or information technology (IT) professional who designs, builds, or operates web applications and services that require identity information about their users. Although applications that use claims-based identity exist on many platforms, this book is written for people who work with Windows-based systems. You should be familiar with the Microsoft .NET Framework, ASP.NET, Windows Communication Foundation (WCF), Microsoft Active Directory® directory service, and Microsoft Visual C#® development system.


%d bloggers like this: