y - Net Developer

amrameshreddy.blog.com242 CHAPTER 7 ■ IMPLEMENTING WCF SECURITYramrameshreddy.blog.comFigure 7-12. Audit log entry that illustrates successful authorization by AuthAuditClientYou are familiar with WCF authentication, authorization, and auditing concepts. However,how do you manage your identity in a distributed environment? Is it fair to conclude that theidentities are all scattered over a public network such as the Internet? Some of our traces ofinformation are stored in Amazon accounts. You might also have a .NET Passport identity tosign on to your Hotmail account. Are you also an avid buyer and seller on eBay? Is there a wayyou can leverage all these identities at once? Or can you present your “platinum” eBay identityto convince Amazon to upgrade your membership? Can you manage them centrally? DoesWCF offer a programming model to make this vision reality?Windows CardSpaceWindows CardSpace (formally known as Infocard) is a specialized metaidentity system thathelps you manage multiple identities. Let’s take an everyday example. You use your driver’slicense to prove you are a valid driver on the road. How do you prove this to a suspectingpolice officer who inquires about it? You show them a valid driver’s license card. In addition,you use a card to prove to a bank teller (or an automatic teller machine) that you have thecorrect credentials to withdraw money. Basically, you use different physical cards to accommodatedifferent situations. However, you need a mechanism to manage all the cards everyday. A common practice in real life is to store all the cards in a wallet. Therefore, the walletbecomes your identity metasystem in everyday life.You can use the same concept in distributed computing. The .NET Passport system hasprovided an e-mail and password to validate you. This is similar to the bank providing a cardto withdraw cash. Similarly, your employees will give the administration digital signature thatproves they are legitimate employees of the company. How do you store all these identitiesand extract them on demand to facilitate your needs? The answer lies in Windows CardSpace.Windows CardSpace is an identity metasystem that handles multiple identities for you.ramrameshreddyramrameshreddy