Integrating RESTful WCF Services With Windows Azure AppFabric Access Control Service (ACS) – Scenario and Solution

Windows Azure AppFabric Access Control Service (ACS) v2 allows externalizing authentication from RESTful WCF services. This post answers the following question:

How can I externalize authentication for my RESTful WCF Service?

Scenario

Solution

Solution Summary

Architecture	Explained Azure AppFabric Access Control Service (ACS) v 2.0 High Level Architecture – REST Web Service Application Scenario SSO, Identity Flow, Authorization In Cloud Applications and Services – Challenges and Solution Approaches Protocols Supported By Windows Identity Foundation (WIF)
Federation	Explained Working With the Security Token Service (STS)
Authentication	Explained Mapping an application to Service Identities
Authorization	Explained Authorization in claims aware applications How-to’s [Could be adapted from] How To: Implement Claims Based Access Control (CBAC) in a Claims Aware ASP.NET Application Using WIF and ACS [Could be adapted from]  How To: Implement Role Based Access Control (RBAC) in a Claims Aware ASP.NET Application Using WIF and ACS
Identity/Token flow and transformation	Explained Rule Groups Rules How-to’s How To: Implement Token Transformation Logic Using Rules
Trust management	Explained Managing trust using Keys How-to’s How To: Configure Trust Between ACS and RESTful WCF Service Using Symmetric Keys

Samples

• ASP.NET Simple Service: A very simple ASP.NET web service that uses ACS for authentication and simple authorization
• WCF Username Authentication: A very simple WCF service that authenticates with ACS using a username and password
• WCF Certificate Authentication: A very simple WCF service that authenticates with ACS using a certificate

Related Books

• Programming Windows Identity Foundation (Dev - Pro)
• A Guide to Claims-Based Identity and Access Control (Patterns & Practices) – free online version
• Developing More-Secure Microsoft ASP.NET 2.0 Applications (Pro Developer)
• Ultra-Fast ASP.NET: Build Ultra-Fast and Ultra-Scalable web sites using ASP.NET and SQL Server
• Advanced .NET Debugging
• Debugging Microsoft .NET 2.0 Applications

Related Info

• Integrating ASP.NET Web Applications With Azure AppFabric Access Control Service (ACS) – Scenario and Solution
• Azure AppFabric Access Control Service (ACS) v 2.0 High Level Architecture – REST Web Service Application Scenario
• Azure AppFabric Access Control Service (ACS) v 2.0 High Level Architecture – Web Application
• Windows Identity Foundation (WIF) Explained – Web Browser Sign-In Flow (WS-Federation Passive Requestor Profile)
• SSO, Identity Flow, Authorization In Cloud Applications and Services – Challenges and Solution Approaches
• Protocols Supported By Windows Identity Foundation (WIF)
• Windows Identity Foundation (WIF) Fast Track
• Windows Identity Foundation (WIF) Code Samples
• Windows Identity Foundation (WIF) SDK Help Overhaul
• Windows Identity Foundation (WIF) and Azure AppFabric Access Control (ACS) Service Survival Guide