Lamont Harrington's Blog

Windows Communication Foundation Security Guidance

The intial release of the WCF Security Guidance from the Microsoft Patterns & Practices team has been released to Codeplex.  The guidance contains how-to video and articles that describe common security practices when designing, developing, and deploying services built on WCF.  The guidance content consists of the following:

How-To Videos:

• Host WCF in a Windows Service
• Impersonate the Original Caller in WCF calling from a Windows Form
• Using basicHttpBinding with Certificate Authentication from Windows Forms
• Use netTcpBinding with Windows Authentication and Message Security
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Form
• Use WsHttpBinding with Certificate Authentication with Message Security
• Use WsHttpBinding with Windows Authentication and Message Security

How-To Articles:

• Create and Install Temporary Certificates in WCF for Message Security During Development
• Create and Install Temporary Certificates in WCF for Transport Security During Development
• Impersonate the Original Caller in WCF Calling from a Web Application
• Impersonate the Original Caller in WCF Calling from Windows Forms
• Use netTcpBinding with Windows Authentication and Transport security in WCF from Windows Forms
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
• Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
• Use Username Authentication with the SQL Server Membership Provider and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Transport Security in WCF Calling from Windows Forms

The Silverlight 2 Retail Financial Services Demonstrator provides essential resources to help customers and ISVs to create their own demo or proof of concept based on the Silverlight 2 platform. Included in the kit are:

• Functional Silverlight 2 Website (Woodgrove Financial) - View it online!
• Installation, customization and demo script that provides step by step instructions for installing the demo, customizing the data shown in the demo as well has how to step through the site with talking points.
• Source Code – that is right, you also get to see and use the source code to see what is going on under the covers and use as a foundation for your own POC!

Why use Silverlight 2 and the Demonstrator?

• Immersive, cross-platform / cross-browser user experience
• Insightful visualizations, improved end user experience that can be personalized and branded
• Great performance, reuse of .NET code on the web (cross platform!!)
• Great examples of using visualizations to help sell and service financial products including cause and effect, multiple scenarios, unified communications, etc…

Over the past year, I've had the opportunity to work on some really cool and unique projects.  I'm proud to add yet another project to my portfolio, which is the current work we're doing with the Library of Congress and the delivery of what they're calling their "New Visitors Experience", set to launch in the next month.  As the Microsoft Solutions Architect for this effort, I must say that to date we've produced some compelling solutions around Windows Presentation Foundation and Silverlight.  This work has been met with a tremendous amount of press but yet is only the tip of the iceberg of what's yet to come.  We've recently posted a video case study on our MIX website that highlights some of our efforts to date.  Stay tuned for more from this blog regarding the Library of Congress project and the really, really cool things we're doing around Silverlight, WPF, WCF, Windows Live and SharePoint Server 2007!

Microsoft has recently released the Silverlight Blueprint for SharePoint.  The Silverlight Blueprint for SharePoint is source code and guidance for developers describing how to use Microsoft Silverlight and Microsoft SharePoint Products and Technologies together in business applications and Internet Web sites. SharePoint applications that use Web Parts can now be built using Silverlight user interface elements. This capability enables a fresh look at data exposed through SharePoint Products and Technologies using the modern graphics capability in Silverlight.

To get more information about the blueprint and find out when/where you can download the bits, head on over to the Silverligh Blueprint for SharePoint website.