The Patterns & Practices Team have recently released v1.0 of the web services security guide (in PDF format) that shows how to make the most out of WCF.  With end-to-end application scenarios, it shows you how to design and implement authentication and authorization in WCF. Learn how to improve the security of your WCF services through prescriptive guidance including guidelines, Q&A, practices at a glance, and step-by-step how tos. It’s a collaborative effort between patterns & practices, WCF team members, and industry experts.

The guide has been released on CodePlex and is available for download.

Bookmark It

Hide Sites

Version 2.0 of the OBA Composition Reference Toolkit was released to the web today, on schedule and with all the great new features promised for the release. Version 1.0 of the toolkit was released at the Office Developer’s Conference in February 2008.

Watch the OBA Composition Reference Toolkit Overview Video to get an overview of the toolkit, the motivations for creating it, and its intended use. Visit the OBA Composition Reference Toolkit site to access and explore related resources: Installers for the toolkit & sample components, Documentation – architecture, user, admin, developer, and overview video.

What’s New in Version 2.0?

• IT administration capabilities integrated into the SharePoint Central Administration portal
• A prescriptively secure user experience for OBA composition
• Support for incremental deployment of OBAs.
• Support for installing the OBA Composer on a client computer that is running the Windows Vista operating system and connecting to a remote computer that is running Office SharePoint Server.
• Spport for many new, out-of-the-box components, too, which cover scenarios that pertain to Expense Reporting, Purchase Requisition Management, Financial Services, and Health & Life Sciences solutions
• Source code (framework, tools, and sample components) of the OBA Composition Reference Toolkit to enable independent software vendors (ISVs) and solution integrators to extend and repurpose the Toolkit to suit their individual needs.

Visit the OBA Composition Reference Toolkit site for more information.

Bookmark It

Hide Sites

Windows Communication Foundation Security Guidance

The intial release of the WCF Security Guidance from the Microsoft Patterns & Practices team has been released to Codeplex.  The guidance contains how-to video and articles that describe common security practices when designing, developing, and deploying services built on WCF.  The guidance content consists of the following:

How-To Videos:

• Host WCF in a Windows Service
• Impersonate the Original Caller in WCF calling from a Windows Form
• Using basicHttpBinding with Certificate Authentication from Windows Forms
• Use netTcpBinding with Windows Authentication and Message Security
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Form
• Use WsHttpBinding with Certificate Authentication with Message Security
• Use WsHttpBinding with Windows Authentication and Message Security

How-To Articles:

• Create and Install Temporary Certificates in WCF for Message Security During Development
• Create and Install Temporary Certificates in WCF for Transport Security During Development
• Impersonate the Original Caller in WCF Calling from a Web Application
• Impersonate the Original Caller in WCF Calling from Windows Forms
• Use netTcpBinding with Windows Authentication and Transport security in WCF from Windows Forms
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
• Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
• Use Username Authentication with the SQL Server Membership Provider and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Transport Security in WCF Calling from Windows Forms

Bookmark It

Hide Sites

Web Service Software Factory: Modeling Edition

For Visual Studio 2008

This deliverable is available on MSDN at:

http://msdn.microsoft.com/servicefactory

About the Deliverable

The Web Service Software Factory: Modeling Edition (also known as the Service Factory) is an integrated collection of resources designed to help our customers quickly and consistently build WCF and ASMX Web services that adhere to well-known architecture and design patterns. These resources consist of models with code generation in the form of tools integrated with Visual Studio and patterns and architecture topics in the form of written guidance.

The Service Factory contains automation and guidance integrated into Visual Studio 2008 for building Web services. The core of the automation components is a Web services domain model. This domain model contains elements such as service contracts, operations, messages, and data contracts. This domain model manifests itself in the form of three integrated domain-specific languages (DSLs) that are used to model services: Service Contract Model, Data Contract Model, and the Host Model. The Service Contract Model is illustrated in the following screenshot.

To learn more about the Service Factory, please visit its official home on MSDN at http://msdn.microsoft.com/servicefactory.

Community (http://www.codeplex.com/servicefactory)

The community site contains hands-on labs for both using and extending the Service Factory, discussions with customers and field, known issues, and roadmap information. In the near future the site will include presentations, demonstration videos, and community contributions.

Bookmark It

Hide Sites

Our Architecture Strategy Team has recently unveiled a great solution geared at simplifying the task of building Office Business Applications (OBA) using the Microsoft Office System platform.

The solution, called the OBA Composition Reference Toolkit,  surfaces the underlying composition capabilities of the 2007 Office System and provides a prescriptive application composition experience for Information Workers to build OBA solutions.

You can head over to the Architecture Center on MSDN to get more information about the solution and download the bits.  Right now, only the binaries are available, but the plan is to release the source code by mid-March.

Bookmark It

Hide Sites