Last Friday I announced that the new version of the Biztalk Services SDK introduced support for managed cards; I also promised I would have given more details about how to use it. Well, a promise is a promise: this post will walk you through a sample that uses managed cards from a publicly available IP to authenticate with a WCF service exposed via the Relay; the sample will also show how to play with the policy engine of the Internet Service Bus for managing authorization. We will get our sample managed card from one STS exposed by Federatedidentity.net : also known as Microsoft Identity Lab, this is a website maintained by my good friend (& coauthor ) Caleb & colleagues in the federated identity division. From the about page : Identity Lab is a set of hosted services to support testing of Identity Protocols. As the world shifts to increasing the security of digital identities, it is important to ensure that the underlying protocols used to transfer information about identities are interoperable, which helps to ensure the cohesiveness of the Identity Metasystem. We aim to provide a set of test endpoints to test the interoperability of Identity Protocols amongst multiple partners and vendors. The site will continue to evolve as the Identity space evolves. We are committed to adding features that will help ease the effort required to test the interoperability of Identity Protocols. Federatedidentity.net has a lot of interesting features per se, and I encourage you to explore Read More...