Making the Internet Single Sign-On Capable Published Feb 28, 2011 | Posted in Development Wouldn't it be neat if logging on to Windows gave you Single Sign-On capabilities to the rest of the internet? Read Article About Steve Syfuhs Steve Syfuhs is a developer on the Windows Authentication team at Microsoft. Read More about Steve Mastodon github.com/SteveSyfuhs
Study of Commercially Deployed Single Sign On Published Apr 25, 2012 An interesting research paper that shows the security state of SSO services used commercially. Read Article
Input Validation: The Good, The Bad, and What the Hell are you Doing? Published Nov 28, 2011 Validating input is a useful way of preventing dangerous values from getting into your system. Read Article
The Importance of Elevating Privilege Published Aug 28, 2011 Controlling your privilege level is an important aspect of good security. Read Article | Development
Talking about Security Article Series Published Jun 2, 2011 A primer on writing secure code. Read Article | Development
Creating a Claims Provider Trust in ADFS 2 Published Apr 25, 2011 ADFS allows you to receive identities from other identity providers. Here's how to set it up. Read Article