Very nice visual breakdown in the ZDNet article here: http://www.zdnet.com/blog/microsoft/microsoft-shares-officially-its-future-bpos-plans/6857
]]>http://arstechnica.com/microsoft/guides/2010/06/microsoft-azure-for-nubcakes.ars
Compares and contrasts the various vendor cloud offerings: Azure, EC2, etc., along with the different storage models that each of them use.
]]>There are a few “tricks” to make the conversation work well, though, particularly as regards formatting of claims from one org to the other. The ADFS PG has published a walk-through describing a PoC setup here.
Happy federating!
]]>White paper (DOCX or PDF) available from the Interop Vendor Alliance here.
Happy downloading!
]]>In a federated trust relationship, an AD FS-protected application will often fail because a certificate on the partner side has expired, often without the partner being aware of it. Which makes for a fun day of trying to track down “the ADFS guy” in the other organization to convince them that they need to go update their (most often) token-signing certificate.
Now, there’s no actual way to prevent this from occurring – you don’t control your partner’s infrastructure, and that’s kinda the point.
But AD FS 2.0 will at least try to alert you that a problem may be about to occur, by logging an event when one of your configured partner’s certificates is about to expire, or has actually expired:
Event ID 389
AD FS 2.0 detected that one or more of your trusts require their certificates to be updated manually because they are expired, or will expire soon.
If AD FS 2.0 is a major part of your operational life, this event needs to trigger an alert in your monitoring system of choice.
]]>“The Information Card Issuance Community Technology Preview (CTP) Add-On for Active Directory Federation Services 2.0 RTM enables issuance of IMI 1.0- and IMI 1.1-compliant information cards from the released version of AD FS 2.0.
The goal of the CTP is to enable the community to continue to exercise the capabilities of the identity metasystem, as relates specifically to information card issuance, in testing, pilots, and other non-production environments.”
MS “have also adding two new mechanisms for interaction and feedback on this topic, a dedicated Information Card Issuance Forum and a monitored e-mail alias ici-ctp@microsoft.com.”
]]>Eugenio Pace’s current Patterns & Practices project, Part 1 at least is in Release Candidate stage.
]]>Presentation, slides and interview. A good listen, as always, from Kim.
]]>