Category Archives: Security

Sitecore extranet authentication with OpenIdConnect

Beginning of this year, I wrote about how to make ClaimsIdentity work with Sitecore, after that I tried integrating Sitecore extranet authentication with OpenId Connect but had little trouble as I was using Owin based pipelines to perform the integration … Continue reading

Posted in Framework, Security, Sitecore, Sitecore MVC | Tagged , , , | 10 Comments

Sitecore with ClaimsIdentity

This post is an adventures experience to explore if Sitecore can work with ClaimsIdentity and make my extranet authentication Claims aware, with little experiment I could able to get both application (extranet) and Sitecore working but it requires more testing … Continue reading

Posted in Security, Sitecore, Sitecore MVC | Tagged , | 9 Comments

Development Framework for Sitecore MVC

Source code for this framework is available on GitHub It’s been 3 year I have been working on Sitecore Mvc (6.6 & 7.2) and had seen some of the bad and best enterprise framework laid out for Sitecore development. With … Continue reading

Posted in Framework, MVC, Security, Sitecore | Tagged , , , , | 9 Comments

Policy Based Authorization in Windows Identity Foundation (WIF) – Part II

Policy based authorization has been gaining ground lately though it is not fully adopted, XACML – 4 main components PAP is the Policy Administration Point This is where you administer the policies changing the security rules, and policies. This is … Continue reading

Posted in Security, WIF | Leave a comment

Policy Based Authorization in Windows Identity Foundation (WIF) – Part I

I wrote before about Claims based authentication here and a sample IP-STS to perform Authentication, but Authentication is not just enough for any application, it also requires Authorization, this is required to protect your resources and actions. Traditionally, its been … Continue reading

Posted in Security, WIF | Leave a comment

Identity in .NET 4.5 (aka WIF)

This article is based on the presentation given by Brock Allen and I would like to thanks him that he allowed me to use his presentation and code. Pleae refer his presentation here. http://brockallen.com/2012/10/16/demos-microsoft-devboston-windows-identity-foundation-in-net-4-5/ Traditional Approach to Authentication – Authentication … Continue reading

Posted in Security, WIF | Tagged , | 2 Comments