Summary

In this chapter, you have seen how to use Windows CardSpace to implement claims-based security. You have learned how to configure a WCF client application and service to interact with Windows CardSpace and how to use a self-issued card to send a claim to a service. You have seen how a service can query the values of claims it has been sent in order to authorize access to operations. You have also looked at how to configure a client application and service to use a third-party STS for authenticating claims. Finally, you have seen how organizations can use claims-based authentication and STSs to implement federated security.