Using ADAL .NET to Authenticate Users via Username/Password

Using ADAL .NET to Authenticate Users via Username/Password

This might be the most requested feature for ADAL: the ability of authenticating a user by pumping in username/password, without showing any pop up. There are perfectly legitimate scenarios that require that feature; unfortunately there are also many ways in which abusing this feature might backfire. With the RC we just released, we…

ADAL for .NET/Windows Store/Windows Phone Is Now Open Source!

We’ve been saying it was coming for almost a year. With this RC preview release, it’s finally happening: ADAL for .NET/Windows Store/Windows Phone is now fully open source! Without getting too dramatic, this truly ushers a new era of transparency and collaboration between our team and you guys – you’ll be able to:…

OWIN Protocol Middleware, Cookies and Reference Mode Sessions: We Need Your Feedback!

OWIN Protocol Middleware, Cookies and Reference Mode Sessions: We Need Your Feedback!

As you know, development stacks implementing web sign in protocols traditionally handle sessions by tracking the content of the initial token in form of a session cookie. That is not the only way in which it could be done, and I do think it will change in the future, but for the time…

OpenID Connect and WS-Fed OWIN Components: Design Principles, Object Model and Pipeline

OpenID Connect and WS-Fed OWIN Components: Design Principles, Object Model and Pipeline

After having promised (to you and to myself) to write more in depth about the new OWIN components for OpenId Connect and WS-Federation, I am finally carving out some time to sit down and jolt down my thoughts about it. My goals for this post are to help you to understand what those…

Use the OWIN Security Components in ASP.NET to Implement Web Sign On with ADFS

Use the OWIN Security Components in ASP.NET to Implement Web Sign On with ADFS

The enthusiasm for the new OWIN-based programming model is spreading – and one of the things I get asked most often has to do with how to use it to connect to ADFS. That’s actually pretty simple. So simple, in fact, that I don’t really need to write much to tell you how…

Use OWIN & Azure AD to Secure Both MVC UX and Web API in The Same Project

Use OWIN & Azure AD to Secure Both MVC UX and Web API in The Same Project

Mixing and matching multiple authentication styles in a single web application has always been difficult with WIF. The new OWIN security components in ASP.NET change that, thanks to the finer grained control they grant over request processing pipelines. One of the most common requests I have been hearing in the last couple of…