browse.develop.com
Browse.develop.com is a community that was established to collect and organize valuable web information. Our technical staff have selected and indexed information and courses that they feel will help you stay current on best practices across the SDLC.

15 Articles match "Authentication"

Related DevelopMentor Courses MORE
SharePoint for Developers (WSSv3/MOSS2007)
Utilize the WSS object model for building applications in SharePoint Build custom workflow solutions for SharePoint Create custom event handlers Use features and solutions for deploying projects for WSS and MOSS Build standard web parts and web parts utilizing AJAX Handle custom authentication solutions Implement best practices for building solutions with WSS and MOSS Leverage the Business Data Catalog Create custom lists that use custom content types Essential SharePoint for Developers (WSSv3/MOSS2007) covers the critical building blocks for developing solutions for both Windows SharePoint Services
DevelopMentor Courses - Friday, June 12, 2009
READ MORE
.NET Security
Identify and prioritize risks and vulnerabilities in applications Protect data using encryption and signatures Impersonate and delegate Windows credentials Integrate with Windows domains and network authentication Write sandboxed applications Avoid common security threats like cross-site scripting or SQL injection Use CardSpace to authenticate users Secure communication with WCF Authenticate and authorize users in ASP.NET Security is a feature. Conventional Cryptography Many security techniques revolve around cryptography and strong authentication. But not every security feature is also a secure feature.
DevelopMentor Courses - Friday, June 12, 2009
READ MORE
Securing J2EE Web Applications
Understand potential sources for untrusted data Understand the consequences for not properly handling untrusted data such as denial of service, cross-site scripting, and injections Be able to test web applications with various attack techniques to determine the existence of and effectiveness of layered defenses Prevent and defend the many potential vulnerabilities associated with untrusteddata Understand the vulnerabilities associated with authentication and authorization within the context of web services Be able to detect, attack, and implement defenses for authentication and authorization functionality
DevelopMentor Courses - Friday, June 12, 2009
READ MORE

38 Articles match "Authentication"

The Latest from DevelopMentor MORE
This week: Trooper Heidelberg
same: provide a more meaningful representation of "identity" for authentication, authorization and Looking forward to this week’s nice little security conference organized by by my old friends at ERNW . Federated Identity
www.leastprivilege.com - Sunday, March 7, 2010
READ MORE
WCF, WIF and Load Balancing (and a bit of Azure)
You would need to create a custom binding that uses an authentication mode of IssuedTokenOverTransport (for mixed Pablo wrote a post yesterday giving giving some background information on how session tokens are protected in WIF – here some some additional info for WCF: The
www.leastprivilege.com - Thursday, February 18, 2010
READ MORE
Using SAML as a Client Credential Type in WCF (updated to WIF RTM)
call authentication and filtering logic IClaimsIdentity newIdentity; try { if (ValidateUser(identity, out newIdentity)) { return new ClaimsIdentityCollection ( new IClaimsIdentity [] { newIdentity }); } else { throw new SecurityTokenValidationException ( "Authentication failed" A reader has asked me to update the Client SAML sample to WIF RTM (for background and and motivation please read here first). The
www.leastprivilege.com - Thursday, February 4, 2010
READ MORE
  • The Best from DevelopMentor MORE
  • Zermatt: Using Forms Authentication in a Passive STS
    Since all Zermatt samples use Windows authentication to auth against an STS - the question how to use forms authentication instead popped up several times. Authentication Sign In In the Authenticate It is easy to do that.
    www.leastprivilege.com - Thursday, August 14, 2008
    READ MORE
  • Custom Basic Authentication is now on Codeplex
    I also moved my "Basic Authentication against non-Windows accounts for IIS" (phew) project to Codeplex http://www.codeplex.com/CustomBasicAuth Again, if you have feature ideas or want to contribute, contact me. ...Tags: Tags: ASP.NET;IIS;WC
    www.leastprivilege.com - Saturday, April 19, 2008
    READ MORE
  • Using IdentityModel: Adding ASP.NET Support Part 1 (Authentication based Claims)
    The job of the claims manager is this: Creating claims based on the technical authentication details (Windows, Forms, client certificates etc.) Invoking external claims transformation policies which then build the app specific claims based on the technical ones Making the AuthorizationContext available to pages (via Thread.CurrentPrincipal/Context.User - see my previous post) The first step is to write an IAuthorizationPolicy to map the ASP.NET authentication Adding claims support to ASP.NET is a perfect candidate for an HTTP module.
    www.leastprivilege.com - Wednesday, March 19, 2008
    READ MORE
  • Use Geneva Session Management for your own needs
    to establish an authentication session. the standard forms authentication principal. it, e.g.: public class Transformer : ClaimsAuthenticationManager { public override IClaimsPrincipal Authenticate( string endpointUri, IClaimsPrincipal incomingPrincipal) { // The custom claims you are adding in the authentication Geneva Framework is a Framework is a Framework. One part of that framework is the SessionAuthenticationModule for ASP.NET.
    www.leastprivilege.com - Sunday, May 24, 2009
    READ MORE
  • (SAML) Token Creation in a Geneva STS
    differ for other token types. CreateStatements Creates the SAML subject, attribute and authentication statements. The last step is to set the proof key identifier and subject confirmation method (holder of key / bearer) CreateAttributeStatement Creates the attribute statement based on the claims from the token service. CreateAuthenticationStatementFromAuthenticationInformation Creates the authentication statement based on the authentication
    www.leastprivilege.com - Saturday, November 22, 2008
    READ MORE
  • Patterns & Practices - Claims based Authentication & Authorization Guide
    Summer break is over – and exciting times lie ahead. Over the course of the next months I will be working with Eugenio , Keith , Vittorio , Matias and David . The end result will (hopefully) be a very interesting, useful and pragmatic guide to all things claims.
    www.leastprivilege.com - Sunday, August 23, 2009
    READ MORE
  • Using Silverlight to Access WIF secured WCF Services
    An example would be that the user first authenticates with the web application and In this case all the authentication related authentication headers, cookies and the like. This You have to somehow authenticate with the STS. This topic comes up quite often recently – so I hope the title is search engine friendly. Disclaimer: Disclaimer: At the time of this writing, the current version of Silverlight is v3 and
    www.leastprivilege.com - Wednesday, October 28, 2009
    READ MORE