To implement Windows Live ID Delegated Authentication, you must register your Web site with Microsoft® as an application and receive an application ID for use with the service.
Only a person who has a valid Windows Live ID can register an application and receive an application ID. After you have registered your application, it can access information from other Windows Live ID services. You can sign in and change most of your application's registration settings at any time.
Registering Your Application
The Live Services Developer Portal assists you with the registration process, issues your application ID to you, and provides a place where you can continue to manage all the applications you register.
Important: |
|---|
|
When you register an application, you must supply a domain name in which the application is located. This domain name uniquely identifies your application in Windows Live ID, so multiple applications cannot share the same domain name.
|
To get your application ID
-
Go to the Live Services Developer Portal.
-
Sign in by using your Windows Live ID.
Note: |
|---|
|
If this is your first visit to this site, you will see several pages that configure your Windows Live ID for use with the site.
|
-
Click New Service.
-
Click Live Services: Existing APIs.
-
Provide the following information in the form on the Create a page.
|
Item
|
Description
|
|---|
|
Service Component Label
|
A unique and friendly name that you use to refer to your application. We recommend that you specify a human-readable name.
Important:
The service component label that you specify should contain only alphanumeric characters and cannot be changed after registration is complete.
|
|
Service Component Description
|
A description of the service component. You can change this description at any time.
|
|
Domain
|
The domain name of your application. For most applications, this domain name must be a fully qualified Domain Name System (DNS) name that is unique to your application.
If you are using only Web Authentication, you can ignore this field.
|
|
Return URL
|
The URL of the page on your Web site to which the Windows Live ID authentication service redirects users (along with the consent token) after they have completed the consent-request process.
The return URL must be a fully qualified Domain Name System (DNS) URL pointing to a page on your Web site, and it must not contain IP addresses or query-string parameters.
You must create a page on your Web site that corresponds to the return URL, to handle the response from the consent service and receive the consent token.
You can change the non-domain part of the return URL later when you extend and adapt the sample code to your Web site.
Important:
If your return URL or other pages on your site use Secure Sockets Layer (SSL), use "https" in the src attribute for the sign-in link.
|
-
Click Create. After your service component is created, the Summary page appears. This page contains the following information about your site:
-
Application ID. A 16-character string that represents your application. Record this string for later use.
-
Domain(s). The domains associated with your application.
-
Return URL. The return URL you specified for your application.
-
Secret Key. A security key that Windows Live ID uses to encrypt and sign all tokens that it sends to your site. You should record this key, but we recommend that you do not store it in the same location as its corresponding application ID.
Registration is finished! You can now begin implementing Delegated Authentication.
Whenever you want to retrieve or change your application data, return to the Live Services Developer Portal. Sign in with the Windows Live ID account that you used during registration to see and manage your application projects.