While WS-Trust provides the primitives for playing the token issuing game, WS-Federation builds on those capabilities and enables to describe the behavior of complex scenarios. Microsoft and IBM recently published a joint whitepaper, titled Understanding WS-Federation<\/A>, which gives exhaustive descriptions of the specification in action on various notable situations. Namely, the paper really goes in fine details of how WS-Federation handles sing in and resource access management in two fairly realistic scenarios, about enterprise and healtcare (I suspect Roberto is behind the latter :-)). Both the passive and active case are considered. Besides fulfilling its obvious purpose of explaining how WS-Federation work, the paper is a great way of stimulate your thinking about the nuances that emerge in canonical (yet realistic) federation scenarios.<\/P> Don<\/A> announces the paper and give some background here<\/A>. Suggested reading! \ud83d\ude42 <\/P> P.S.: I SO need to find a good synonym for “scenario”.<\/P><\/p>\n","protected":false},"excerpt":{"rendered":" While WS-Trust provides the primitives for playing the token issuing game, WS-Federation builds on those capabilities and enables to describe the behavior of complex scenarios. Microsoft and IBM recently published a joint whitepaper, titled Understanding WS-Federation, which gives exhaustive descriptions of the specification in action on various notable situations. Namely, the paper really…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[61,9],"tags":[],"class_list":["post-620","post","type-post","status-publish","format-standard","hentry","category-architecture-ws","category-identity"],"_links":{"self":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/620","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/comments?post=620"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/620\/revisions"}],"predecessor-version":[{"id":1771,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/620\/revisions\/1771"}],"wp:attachment":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/media?parent=620"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/categories?post=620"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/tags?post=620"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\n