Exercise 2: Summary

This short exercise demonstrates how easy it is to configure an application to accept identities from an existing STS. For the sake of the exercise the external STS was already configured for sending claims to our application, however the process of configuring Active Directory Federation Services (ADFS) for issuing claims for an RP is similarly easy and streamlined.

We also demonstrated how the use of claims allows the creation of sophisticated authorization criteria, such as comparisons against thresholds, and how the Windows Identity Foundation object model makes those criteria really easy to implement.