Sonntag, 18. Mai 2008

Using Windows CardSpace


Windows CardSpace is a feature of the .NET framework that manages information cards.

One use-case is to associate a card with an online account so you can use this to log onto the site in the future.



When the website requests a card, CardSpace will first display information about the site.



On the first time through, you have no cards. You may create a personal card.





When done, send it to the relying party.



Unlike the personal card created above, Managed cards are issued by a separate identity provider. In that case, import the card.



When a relying party requests a managed card, your computer will in turn request validation from the identity provider. A resulting token with the blessing of the identity provider is sent to the relying party. This is a mechanism by which authentication and authorization can be off-loaded to a third-party.


Keine Kommentare: