Windows Identity Foundation (WIF) Content Map

**Learn about WIF                                             **     ****

If you are new to WIF, we recommend that you review the following announcements, introductory reference links and claims-related details provided in this section to learn more about this technology.   

Introduction to WIF

• Get Started with Windows Identity Foundation (WIF) 
• WIF Home Page
• WIF Frequently Asked Questions
• Windows Identity Foundation (WIF) Questions and Answers
• Federation Scenario
• WIF Workshops on Channel 9 [Video]
• Passive Authentication for ASP.NET with WIF
• Windows Identity Foundation (WIF) Wiki Articles

Overview of WIF

• WIF Overview
• MSDN WIF Overview
• Glossary
• 60 Seconds On Developing Claims Aware ASP.NET Web Applications And WCF Services Using AD FS

**About Claims **

• The Role of Claims

About Claims-Based Identity & Applications

• Claims-Based Identity Overview
• Introduction to Claims-Based Identity and Windows Identity Foundation (WIF) [Video] 
• P&P: A Guide to Claims–based Identity and Access Control
• A Guide to Claims-Based Identity and Access Control
• Claims-Based Identity and Access Control Guide
• Understanding Claims-Based Applications: An Overview of AD FS 2.0 and WIF** [Video]**
• Windows Identity Foundation Whitepaper For Developers
• P&P: Online Resources

******Research WIF Solutions                                         ******

The following links can help you understand how WIF can work together with other technologies and products (both Microsoft and non-Microsoft) to provide single sign-on capabilities that span multiple boundaries and identity platforms. Note that several links in this section will jump you to community-created content that resides on web sites external to the TechNet Wiki.

Windows Azure Applications Platform

• WIF and Windows Azure Applications [Video] 

Windows Azure Appfabric Access Control Services (ACS)

• Windows Azure AppFabric ACS Content Map
• Windows Identity Foundation (WIF) and Azure AppFabric Access Control Service (ACS) Content Map
• ACS and WIF

Integration with Microsoft on-premises products 

• Using Active Directory Federation Services 2.0 in Identity Solutions  
• AD FS 2.0 Federation with a WIF Application Step-by-Step Guide 

**Windows Identity Foundation (WIF)
**

• WIF Content Map

Windows SharePoint Services (WSS) 3.0 and Microsoft Office SharePoint Server 2007

• Microsoft Federation Extensions for SharePoint 3.0  

WIF and Windows Communications Foundation (WCF)

• WIF and WCF

**Design and Deploy WIF                                      **

The following links can help you get started with planning and deploying a specific WIF design in your production environment. 

Plan and Design

• Design Considerations

• **Security Considerations

  Deploy
  **

**Manage WIF                                                            **

The following links can help you understand how to manage and administer an existing WIF deployment.  

**Monitoring
**

**PowerShell
**

Security

** Sign-in / Sign-out**

• How to use Fiddler Web Debugger to analyze a WS-Federation passive sign-in
• How to invoke a WS-Federation sign-out

Tools

• Windows Identity Foundation (WIF) Tools

**Troubleshoot WIF                                                  **

This following links can be used to help you locate the cause and resolution to common problems that may occur in your existing WIF infrastructure.   

• Fiddler Inspector for Federation Messages 

**Authentication / Authorization

**

• Windows Identity Foundation (WIF) Throws Exception: "ID6018: Digest verification failed for reference"
• Windows Identity Foundation (WIF) – The Difference Between ActAs and OnBehalfOf

**Browser client errors

**

• **Windows Identity Foundation (WIF): A Potentially Dangerous Request.Form Value Was Detected from the Client (wresult="<t:RequestSecurityTo...")
  **

Certificates 

• Windows Identity Foundation (WIF): How to Change Certificate Chain Validation Settings for Web Applications

FedUtil
**
**

• Windows Identity Foundation (WIF): FedUtil.exe on Windows Server 2003 Fails: "Object Identifier (OID) is unknown." 

Installation / Setup

 

• Windows Identity Foundation (WIF): FedUtil.exe on Windows Server 2003 Fails: "Object Identifier (OID) is unknown."
• WIF SDK and Visual Studio 2008 addin failure

 

**Logging / Tracing
**

• CRM 2011: How to Enable Verbose Windows Identity Foundation (WIF) Tracing for Claims-Based Authentication

WS-Federation
 

• Windows Identity Foundation (WIF): How to Utilize the WS-Federation WHR Parameter to Bypass Home Realm Discovery (HRD) 

• Windows Identity Foundation (WIF): How to Utilize the WS-Federation WAUTH Parameter to Specify an Authentication Type 

  Federation Authentication Module (FAM)

• Windows Identity Foundation (WIF): How to Protect Static Content with the Federation Authentication Module (FAM)  

  **Additional WIF References                                                  **

  Here you will find additional reference links to related developer content, software downloads and related technologies.        

  Developer References

  • WIF SDK [Download** | Read Online]** 
  • WIF SDK Class Library (WIF Object Model)
  • Install the Windows Identity Foundation (WIF) SDK
  • Windows Identity Foundation (WIF) Fast Track
  • Windows Identity Foundation (WIF) SDK Help Overhaul
  • Windows Identity Foundation (WIF) Code Samples
  • Configuration for Windows Identity Foundation
  • Windows Identity Foundation (WIF) Configuration Sections in ASP.NET Web.Config
  • Claims Consumer - Relying Party Applications
  • Claims Provider - Security Token Service
  • WIF Class Library and Namespaces
  • Windows Identity Foundation SDK
  • Microsoft Federation Extensions for SharePoint 3.0
  • A Hidden Gem: The WIF Config Schema
  • Token based Authentication and Claims for Restful Services
  • Mixing Forms and Token Authentication in a single ASP.NET Application
  • Mixing Forms and Token Authentication in a single ASP.NET Application (the Details)
  • Common Windows Identity Foundation WS-Federation Exceptions Explained

  **Developer How-To
  **

  • How to: Build an ASP.NET Relying Party Application
  • How to: Build a WCF Relying Party Application
  • How to: Programmatically Enable WIF on a WCF Service
  • How to: Access Claims in an ASP.NET Page
  • How to: Request a Token from the c2WTS
  • How to: Build an ASP.NET STS
  • How to: Build a WCF STS
  • How to: Enable Tracing
  • How to: Add a Custom Token Handler
  • How to: Display the Caller's Sign-In Status
  • How to: Invoke a WS-Federation Sign-Out with ADFS
  • How to: I Am Building A Web Form Application (ACS)
  • How to: I Am Building An ASP.NET MVC Web Application (ACS)
  • How to: I Am Building A SOAP WCF Service (ACS)
  • How to: I Am Building A REST WCF Service (ACS)
  • How to: Deploying Claims-Aware Application To Windows Azure
  • How to: Deploying Claims-Aware Application On Premises
  • How to: Migrate Existing ASP.NET Web Application To Claims Aware
  • How to: Switch to WIF SessionMode in ASP.NET
  • How to: Create Strongly Typed Claims
  • How to: Configure Single Sign-On from Active Directory to a Windows Azure Application
  • How to: Replace ASP.NET Forms Authentication with WIF Session Authentication (for the better)

  Software Downloads

    

  • WIF Software
  • WIF Extension for the SAML 2 Protocol (CTP Release)

  You can also download WIF via the Microsoft Web Platform Installer (Microsoft Download Center). Just search on keyword "identity" within the tool.

  **Related Microsoft Products
  **

  • Active Directory Federation Services 2.0
  • Windows Identity Foundation (WIF) 
  • Windows Azure AppFabric ACS 

  **Related Open Standards
  **

  • OASIS Standards-SAML and more
  • Kantara Initiative (formerly known as the Liberty Alliance)
  • Web Service Interoperability and Specifications (WS-*)
  • Web Service Interoperability (WS-I) Organization
  • OAuth
  • DotNetOpenAuth - OpenID, OAuth, and ICard 

   

  **Community Resources                                                    **

   

  The following resources can be useful for obtaining WIF community support and for keeping up with the latest WIF content updates and news.   

  Forums

    

  • Claims-Based Access Forum
  • WIF on stackoverflow
  • Windows Identity Foundation on stackoverflow

  **Blogs
  **

  • Claims-Based Identity Blog
  • Identity and Access Management
  • Security and Identity in the Cloud
  • Kim Cameron Identity Blog
  • Mike Jones - self-issued
  • Vittorio Bertocci  
  • Steve Syfuhs - Steve on Security
  • Dominick Baier - leastprivilege
  • Steve Peschka - Share-n-dipity
  • Matias Woloski - my facade
  • Alik Levin - Clarity, Technology, and Solving Problems