{"id":2003,"date":"2013-03-25T09:44:18","date_gmt":"2013-03-25T18:44:18","guid":{"rendered":"http:\/\/www.cloudidentity.com\/blog\/?p=2003"},"modified":"2013-03-25T17:00:19","modified_gmt":"2013-03-26T02:00:19","slug":"a-refresh-of-the-identity-and-access-tool-for-vs-2012","status":"publish","type":"post","link":"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/25\/a-refresh-of-the-identity-and-access-tool-for-vs-2012\/","title":{"rendered":"A Refresh of the Identity and Access Tool for VS 2012"},"content":{"rendered":"

\"image\"<\/a><\/p>\n

Today we released a refresh of the Identity and Access Tool for Visual Studio 2012.
We moved the current release # from 1.0.2 to 1.1.0.
VS should let you know that there\u2019s a new version  waiting for you, but if you\u2019re in a hurry you can go here<\/a> and get it right away.<\/p>\n

We didn\u2019t add any new features: this is largely a service release, with lots of bug fixes.<\/p>\n

There is an exception to that, though. We changed the way in which we handle issuer validation of incoming tokens. We now use the ValidatingIssuerNameRegistry<\/a> by default; however we also added in the UI the necessary knobs for you to opt out and fall back on the old ConfigBasedIssuerNameRegistry, should you need to. Details below.<\/p>\n

The New Issuer Validation Strategy<\/h2>\n

Traditionally, WIF tools (from fedutil.exe in .NET 3.5 and 4.0 to the Identity and Access Tools in .NET 4.5) used the ConfigBasedIssuerNameRegistry class to capture the coordinates (issuer name and signing verification key) of trusted issuers. In config it would look as something like the following:<\/p>\n

<<\/span>issuerNameRegistry<\/span> type<\/span>=\"System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, <\/span><\/pre>\n
    System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"<\/span>><\/span>\n  <<\/span>trustedIssuers<\/span>><\/span>\n     <<\/span>add<\/span> thumbprint<\/span>=\"9B74CB2F320F7AAFC156E1252270B1DC01EF40D0\"<\/span> name<\/span>=\"LocalSTS\"<\/span> \/><\/span>\n  <\/<\/span>trustedIssuers<\/span>><\/span>\n<\/<\/span>issuerNameRegistry<\/span>><\/span><\/pre>\n
 <\/p>\n