Code Sample: WCF Username Authentication

Go to the Windows Azure Management Portal, sign in, and then click Active Directory.

To create an Access Control namespace, click New, click App Services, click Access Control, and then click Quick Create. (Or, click Access Control Namespaces before clicking New.)

To manage an Access Control namespace, select the namespace, and then click Manage. (Or, click Access Control Namespaces, select the namespace, and then click Manage.)

This action opens the Access Control Service management portal.

To register your application with ACS, click the Relying party applications, click Add, enter the following information in the form, and then click Save.

• In Name, type Username Binding Sample RP.
  
  
• In Realm, enter http://localhost:7100/Service/Default.aspx.
  
  
• In Token encryption policy, click Require Encryption.
  
  
• In Identity Providers, clear any selected identity providers.
  
  

With your relying party registered, it is now time to create the rules that determine the claims that ACS will issue to your application. In this sample, we create a rule that grants any claim that ACS generates to pass through. To create this rule, , click Rule groups, and then click Default Rule Group for Username Binding Sample. Add a new rule with the following settings, and then click Save.

• In Claim issuer, click Access Control Service.
  
  
• In Input claim type, click Any.
  
  
• In Input claim value, click Any.
  
  
• In Output claim type, click Pass through input claim type.
  
  
• In Output claim value, click Pass through input claim value.
  
  

This sample relies on credentials that ACS manages. The last step to configure ACS is to register the user name and password for the client application to use. To configure a new user name, Service identities, click Add, and then fill out the form. For this sample, enter acssample as the user name, select Password as the Type, enter pass@word1 as the password, and then click Save.

To update the Common class library with information about your Access Control namespace, open SamplesConfiguration.cs, and then enter the following information:

• ServiceNamespace. This is the Access Control namespace that is used in ACS.
  
  
• ManagementServiceIdentityName. This is a management service account’s name.
  
  
• ManagementServiceIdentityKey. This is the password that is associated with the management service account.
  
  
• AcsHostUrl This is the host name of ACS.
  
  

Run the ConfigureSample application in Visual Studio, which will configure ACS to run this sample.

Open the sample in Visual Studio. The solution consists of two projects: WcfService and WcfClient.

If you have not already done so, enter your Access Control namespace details in Common\SamplesConfiguration.cs. For more details, see step 1 of Option 2: Configuring the Sample Using the ACS Management Service. The WcfService and WcfClient projects also use this file.

Open the App.config file in the WcfClient project to verify that your user name and password in the appropriate AppSettings elements are correct. To obtain the user name and password you registered previously, refer to the Service Identities area of the portal. The following is a code snippet showing this area (properly updated) of the Client App.config file:

  <appSettings>
    <!-- Service configuration -->
    <add key="ServiceAddress" value="http://localhost:7100/Service/Default.aspx"/>
    <add key="ServiceCertificateFilePath" value="..\..\..\Certificates\WcfServiceCertificate.cer"/>

    <!-- Client configuration -->
    <add key="ClientUsername" value="acssample"/>
    <add key="ClientPassword" value="pass@word1"/>

  </appSettings>

To run the sample, start the WcfService, and then start the WcfClient. At the client, enter a string to reverse.