{"id":745,"date":"2007-04-05T20:51:26","date_gmt":"2007-04-06T04:51:26","guid":{"rendered":"\/?p=745"},"modified":"2007-04-05T21:50:13","modified_gmt":"2007-04-06T05:50:13","slug":"cobblers-children","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=745","title":{"rendered":"Cobbler's children"},"content":{"rendered":"

Here's an “ouch that hurts” posting <\/a>by Jackson Shaw at Quest:<\/p>\n

I received this email today regarding my identity partner's account that I have at Microsoft. Isn't it unfortunate that given Active Directory Federation Services (ADFS) and CardSpace that I have to do this?<\/p>\n

Shaw, Jackson, The password for the extranet account issued to blah<\/em>\\JShaw will expire on Mar 15 2007. Please proceed to the following URL to change the password: https:\/\/Home.EP.Microsoft.com\/login.aspx<\/font><\/a><\/p>\n

NOTE: Failure to change the password before the expiration date will result in the account being locked and access will no longer be provided.<\/p>\n

Thank you, The Extranet Management Tool Team<\/p>\n

For assistance, please contact your administrator, site owner or support team.<\/p>\n

I have zero time to figure out who my administrator, site owner or support team is.<\/p>\n

I do know my Quest userid and password and wouldn't it be nice if that just worked??<\/p>\n

Jackson is right.  Everything about this is bizarre.  I too love those “contact your administrator” messages – best of all, when I'm the administrator, but in all other cases too. <\/p>\n

Anyway, we are now getting close to the point where Microsoft marketing and other sites will start to light up.<\/p>\n

With the sheer number of sites we have, and the attacks on our perimeter, our IT guys have to go about this in an organized way.  I spoke with Microsoft's internal IT security architects not long ago and was amazed at how well they have thought through the implications of the claims-based approach, privacy issues, uses for CardSpace, and so on. <\/p>\n

Meanwhile a lot of our sites are tied to Windows Live ID, so when it turns on Information Card support, the benefits should start to be widely felt.<\/p>\n

Today Jackson did a piece <\/a>outlining the Laws of Identity<\/a> and  concludes:<\/p>\n

I installed WinFX the other night on my Windows XP system and created my own Information Cards and then used one to logon to Kim's blog<\/font><\/a> – it worked! [He's so surprised? – Kim]<\/em><\/p>\n

Now if I could a Quest property or two to accept either OpenIDs or InfoCards…<\/p>\n

Hey, Jackson – let's get some live company-to-company interaction happening with the technologies we all want to introduce.  Why don't we approach the Extranet Management issue from both ends – you from the quest end, me from this end?  Maybe others would want to jump on as well… The proof of the shoe is in the walking.<\/p>\n

P.S.  Why don't you talk with Pamela<\/a> about getting onto blogging software that accepts Information Cards too?  Mike Jones has done it<\/a>.<\/p>\n

UPDATE: Here is a posting <\/a>on our progress in getting ADFS (Federation Services) going on our extranet, so the collaboration proposed above should be “way simple”.  And it's good to see<\/a> that Brian Puhl not only listened to your original comment but did so much to move things ahead.<\/p>\n","protected":false},"excerpt":{"rendered":"

I installed WinFX the other night on my Windows XP system and created my own Information Cards and then used one to logon to Kim's blog – it worked! <\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[10,8,5,4],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/745"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=745"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/745\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}