How SAML, OAUTH, and other Identity Federation Solutions Work in a Windows Enterprise

From BriForum 2012 Chicago

Presented by Andrew Innes

Pity the naive Enterprise Architect; no sooner does he build a nice Identity and Access Management platform and a nasty Windows app comes along to spoil it. In this session, join Andrew Innes to learn why web apps (and new native apps) have an advantage over Windows apps in adapting to claims-based IAM / entitlement management systems that are the backbone of modern application management, and how Windows apps can be brought along (with some difficulty). Find out how full SAML-style identity federation can be used in some cases, and when to use a pragmatic approach to identity handling. Consideration is given to what this means for customers and service providers in the emerging space of cloud-hosted Windows applications, and for Desktops as a service. The session concludes with a look ahead to what Windows 8 and beyond may bring to the table to improve matters.

[dewaynegeraghty]

At 45minutes in, the other difference is that the client's password isn't transmitted over the wire, its encrypted on the client prior to transmission. Not to forget the client device also needs to be known to the KDC, due to a prior join. 1980's tech was well thought out, thank-you DEC ;)

[CorpseCallosum]

Good Stuff. Someone please tie up the camera man's hands.

[billmentkow]

Great comprehensive easily digestable presentation

[justinmynight]

Nicely done. Thanks for keeping it simple.

[alanfreedman]

Brilliant presentation.  Thanks so much.

[DeeArr]

Good material. Annoy My-First-Video-Camera fiddling.

[aidanoneill]

Anyone know where I can get the slides for this?

[Syncopator]

Verizon is not trustworthy enough to be an identity provider.

[jayak]

Who is this extremely bothering camera man.