Hi all,
So far, what I understand are (please correct me):
ACS provides a very easy way to setup identity provider (Google, Facebook...), I need to setup Windows Azure subscription and then setup the web.config file. To authorize user/role in code, I cast the Thread.CurrentPrincipal or HttpContext.Current.User
to ClaimsPrincipal and invoke the method HasClaim or FindFirst For OAuth 2.0, to authorize the user, I need to use OAuthWebSecurity class to do all the fancy things
ADFS is supported on Windows Server 2012, and allows to do the similar things as ACS as well as to build your own STS service
You can also use WIF to build STS. To enable WIF in your application to trust identity provider(s), I can setup web.config file to trust an identity provider/STS (trustedIssuers element)
A custom STS can be built without ADFS by using third party framework
Questions:
When should ...
Go to the complete details ...