{"id":1024,"date":"2008-11-06T19:09:22","date_gmt":"2008-11-07T03:09:22","guid":{"rendered":"\/?p=1024"},"modified":"2008-11-06T19:42:47","modified_gmt":"2008-11-07T03:42:47","slug":"project-geneva-part-4","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1024","title":{"rendered":"Project Geneva – Part 4"},"content":{"rendered":"

[This is the fourth installment of a presentation I gave to Microsoft developers at the <\/em>Professional Developers Conference (PDC 2008) <\/em><\/a>in Los Angeles. It starts <\/em>here<\/em><\/a>.]<\/em><\/p>\n

\"\"We have another announcement that really drives home the flexibility of claims.<\/p>\n

Today we are announcing a Community Technical Preview (CTP) of the .Net Access Control Service, an STS that issues claims for access control. I think this is especially cool work since it moves clearly into the next generation of claims, going way beyond authentication. In fact it is a claims transformer<\/strong>, where one kind of claim is turned into another.<\/p>\n

An application that uses \u201cGeneva\u201d can use ACS to externalize access control logic, and manage access control rules at the access control service.\u00a0 You just configure it to employ ACS as a claims provider, and configure ACS to generate authorization claims\u00a0derived from the\u00a0claims that are presented to it.\u00a0<\/p>\n

The application can federate directly to ACS to do this, or it can federate with a \u201cGeneva\u201d Server which is federated with ACS.<\/p>\n

ACS federates with the Microsoft Federation Gateway, so it can also be used with any customer who is already federated with the Gateway.<\/p>\n

The .Net Access Control Service was built using the \u201cGeneva\u201d Framework.\u00a0 Besides being useful as a service within Azure, it is a great example of the\u00a0kind of service any other\u00a0application developer could create using the Geneva Framework.<\/p>\n

You might wonder \u2013 is there a version of ACS I can run on-premises?\u00a0\u00a0 Not today, but these capabilities will\u00a0be delivered in the future\u00a0through \u201cGeneva\u201d.<\/p>\n

Putting it all together<\/strong><\/p>\n

Let me summarize our discussion so far, and then\u00a0conjure up\u00a0Vittorio Bertocci<\/a>, who will present a demo of many of these components working together.<\/p>\n