Jason's profileJason Flowers Technology...PhotosBlogLists Tools Help

Jason Flowers

Jason Flowers Technology Space

June 16

Geneva Framework + Azure Access Control Service + Live

The Identity Developer Training Kit for the Geneva Framework is a great resource to start with Geneva and there are various resources for the Azure .NET Access Control Service and Windows Live ID, independently. However i was having trouble using these two together, e.g. using Live ID for authenitcation and the Access Control Service for transformation of claims ( or as a RSTS). 
 
The FedUtil.exe does not support the Access Control Service as it doesnt expose the standard federationmetedata.xml of other STS.
 
The main missing ingredient was the configuration within the web.config. For those who are having the same problem, the following is the configuration within a claims aware web application to make it work. (This is based on Example 5 of the Identity Developer Training Kit )
 
Notice that the issuer uses the LiveFederation.aspx (rather than Federation.aspx)
 

<wsFederation passiveRedirectEnabled="true" issuer=https://<yoursolution>.accesscontrol.windows.net/passivests/LiveFederation.aspx

realm="https://localhost/ClaimsEnableWebSiteEx05/" homeRealm="http://login.live.com" reply="https://localhost/ClaimsEnableWebSiteEx05/"

requireHttps="true" />
 

You will also need to make sure that the Live Claims are correctly mapped to those required by the application within the Azure Control Service Portal.

April 30

SQL Integration Services / SharePoint

If anyone is trying to extract Sharepoint data into SQL server integration services, the following is an example of how to do it with a custom connector:
 
 
Cubes on Sharepoint!! lovely"!!
 
 
April 03

Live broke my SharePoint site! Forms Redirect broken.

Myself and my colleagues came across a major issue today with forms based SharePoint sites not redirecting the user to the login page within Internet Explorer.
 
After a great bit of diagnosis from a colleague of mine, it turns out that the latest Live install from Windows Update adds a new "Office" entry into the request headers which forces SharePoint to respond with a 403 - as it sees it as a client application.
 
Not sure what MS will do about this one as it doesnt sound like a simply fix will exist. MS Support call open.. .we shall see...
 
March 24

Azure Blob Container namespace error

Whilst looking at Azure and trying to create a container within the blob storage i got the error "container name is not valid".
Turns out conatiners must use lower case names. Hope this helps someone else out there!

SysPrep in Windows 2008

I keep on forgetting this so thought i would put it down here...
 
SysPrep is in \windows\system32 in windows 2008. It is no longer on the cd under admin tools...