
The Dot Net Workflow platform offers a standards-compliant Federation Server (Security Token Service) supporting the SAML, OpenID, and WS-Federation protocols. Externalizing application security to a standards-based authorization server enables organizations to remove identity logic from their application, improve developer productivity, enhance application security, and enable interoperability. The Dot Net Workflow Federation Server is designed to provide full support for OpenID and SAML as well as deep support for the federation technologies found in Microsoft ADFS 2.0 and SharePoint 2010.
In a federated security model, authentication is performed by a Security Token Service (STS) that issues security tokens containing claims. Claims are statements of fact about the identity and access rights of the authenticated user. Users can be authenticated in any trusted directory while being granted access to applications and services belonging to other organizations where a trust relationship has been established. This new model removes the need to remember multiple usernames and passwords and allows security management to be centralized.
The claims granted to users in a federated model allow applications to authorize access to features and functionality based on claims from issuers (the STS) in trusted domains. Claims can contain information about the user, roles or permissions, making it a very flexible authorization model. The Dot Net Workflow platform uses claims for its own internal security and provides claims for use by other applications like Microsoft SharePoint 2010. The federated security model is extremely flexible and opens up new avenues for controlling access to application resources. Permissions can be managed in external systems such as the Dot Net Workflow platform and need not be hard coded in an application with federated security.
Dot Net Workflow provides a robust and flexible federation server designed for compatibility with open standards and tight integration with Microsoft federation technologies.