Click here to Skip to main content
15,895,606 members
Home / Discussions / Design and Architecture
   

Design and Architecture

 
AnswerRe: Software Architecture and Design simulators PinPopular
NotPolitcallyCorrect16-Mar-13 6:37
NotPolitcallyCorrect16-Mar-13 6:37 
QuestionDesign of cache services... Pin
Kornfeld Eliyahu Peter13-Mar-13 1:50
professionalKornfeld Eliyahu Peter13-Mar-13 1:50 
AnswerRe: Design of cache services... Pin
jschell14-Mar-13 8:07
jschell14-Mar-13 8:07 
GeneralRe: Design of cache services... Pin
Kornfeld Eliyahu Peter14-Mar-13 21:38
professionalKornfeld Eliyahu Peter14-Mar-13 21:38 
GeneralRe: Design of cache services... Pin
jschell15-Mar-13 8:29
jschell15-Mar-13 8:29 
QuestionSSO recommendations Pin
V.12-Mar-13 23:31
professionalV.12-Mar-13 23:31 
AnswerRe: SSO recommendations Pin
Marco Bertschi14-Mar-13 10:31
protectorMarco Bertschi14-Mar-13 10:31 
AnswerRe: SSO recommendations Pin
jim lahey20-Mar-13 5:11
jim lahey20-Mar-13 5:11 
To the best of my knowledge you wouldn't be wrong to take a look at a form of Federated Identity Management using a Token Service. OpenId, SAML, WIF and OAuth are all token-based and will take you down the road of claims-based authentication and authorization.

http://en.wikipedia.org/wiki/Claims-based_identity[^]

I would have used something like STS as a starting point for a token service, but our management in their infinite wisdom want us to roll our own token service. This despite the fact that our token service will not be interoperable with anything else as it doesn't support any common standards beyond putting a token on the same HTTP header as other token services do. Oh, and there's no integrity check for our claims and everything is passed as clear text. Well, not as clear text actually, we're base64 encoding the token so it would only take a determined person a couple of extra seconds to walk right on in. Then there's the issue of token size, which is limited, so we'll roll our own zip function to cope with that, even though a decent token service will already do this for you, along with everything else we've implemented for no good reason.

But whatever, rant over. Just don't try and reinvent the wheel like our place does. Token authentication is not a walk in the park by any stretch of the imagination so anything you can use off the shelf will save you a ton or arseache.

STS: http://startersts.codeplex.com/[^]
GeneralRe: SSO recommendations Pin
V.20-Mar-13 21:28
professionalV.20-Mar-13 21:28 
QuestionMaintenance vs performance vs security vs data consistency Pin
Bastien Vandamme12-Mar-13 23:00
Bastien Vandamme12-Mar-13 23:00 
AnswerRe: Maintenance vs performance vs security vs data consistency Pin
Pete O'Hanlon12-Mar-13 23:23
mvePete O'Hanlon12-Mar-13 23:23 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Bastien Vandamme12-Mar-13 23:35
Bastien Vandamme12-Mar-13 23:35 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Pete O'Hanlon12-Mar-13 23:40
mvePete O'Hanlon12-Mar-13 23:40 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Bastien Vandamme12-Mar-13 23:58
Bastien Vandamme12-Mar-13 23:58 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Pete O'Hanlon13-Mar-13 0:06
mvePete O'Hanlon13-Mar-13 0:06 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Bastien Vandamme13-Mar-13 1:12
Bastien Vandamme13-Mar-13 1:12 
AnswerRe: Maintenance vs performance vs security vs data consistency Pin
jschell14-Mar-13 8:14
jschell14-Mar-13 8:14 
GeneralRe: Maintenance vs performance vs security vs data consistency Pin
Bastien Vandamme14-Mar-13 10:13
Bastien Vandamme14-Mar-13 10:13 
QuestionMessaging engine/system for cross platform development Pin
dexterama7-Mar-13 8:07
professionaldexterama7-Mar-13 8:07 
AnswerRe: Messaging engine/system for cross platform development Pin
jschell7-Mar-13 8:54
jschell7-Mar-13 8:54 
GeneralRe: Messaging engine/system for cross platform development Pin
dexterama7-Mar-13 10:10
professionaldexterama7-Mar-13 10:10 
GeneralRe: Messaging engine/system for cross platform development Pin
Eddy Vluggen7-Mar-13 22:48
professionalEddy Vluggen7-Mar-13 22:48 
GeneralRe: Messaging engine/system for cross platform development Pin
jschell8-Mar-13 12:33
jschell8-Mar-13 12:33 
QuestionSync file uploading between servers Pin
nitin_ion28-Feb-13 16:20
nitin_ion28-Feb-13 16:20 
AnswerRe: Sync file uploading between servers Pin
Marco Bertschi14-Mar-13 22:14
protectorMarco Bertschi14-Mar-13 22:14 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.