The Patterns & Practices Team have recently released v1.0 of the web services security guide (in PDF format) that shows how to make the most out of WCF.  With end-to-end application scenarios, it shows you how to design and implement authentication and authorization in WCF. Learn how to improve the security of your WCF services through prescriptive guidance including guidelines, Q&A, practices at a glance, and step-by-step how tos. It’s a collaborative effort between patterns & practices, WCF team members, and industry experts.

The guide has been released on CodePlex and is available for download.

Bookmark It

Hide Sites

Windows Communication Foundation Security Guidance

The intial release of the WCF Security Guidance from the Microsoft Patterns & Practices team has been released to Codeplex.  The guidance contains how-to video and articles that describe common security practices when designing, developing, and deploying services built on WCF.  The guidance content consists of the following:

How-To Videos:

• Host WCF in a Windows Service
• Impersonate the Original Caller in WCF calling from a Windows Form
• Using basicHttpBinding with Certificate Authentication from Windows Forms
• Use netTcpBinding with Windows Authentication and Message Security
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Form
• Use WsHttpBinding with Certificate Authentication with Message Security
• Use WsHttpBinding with Windows Authentication and Message Security

How-To Articles:

• Create and Install Temporary Certificates in WCF for Message Security During Development
• Create and Install Temporary Certificates in WCF for Transport Security During Development
• Impersonate the Original Caller in WCF Calling from a Web Application
• Impersonate the Original Caller in WCF Calling from Windows Forms
• Use netTcpBinding with Windows Authentication and Transport security in WCF from Windows Forms
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
• Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
• Use Username Authentication with the SQL Server Membership Provider and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Transport Security in WCF Calling from Windows Forms

Bookmark It

Hide Sites

Our Architecture Strategy Team has recently unveiled a great solution geared at simplifying the task of building Office Business Applications (OBA) using the Microsoft Office System platform.

The solution, called the OBA Composition Reference Toolkit,  surfaces the underlying composition capabilities of the 2007 Office System and provides a prescriptive application composition experience for Information Workers to build OBA solutions.

You can head over to the Architecture Center on MSDN to get more information about the solution and download the bits.  Right now, only the binaries are available, but the plan is to release the source code by mid-March.

Bookmark It

Hide Sites

The final release of the Microsoft Enterprise Service Bus (ESB) Guidance for BizTalk Server 2006 R2 is now on MSDN.  The Microsoft ESB Guidance provides architectural guidance, patterns, practices, frameworks, reusable components and samples for BizTalk Server 2006 R2 to simplify the development of an Enterprise Service Bus (ESB) on the Microsoft platform and to allow Microsoft customers to extend their own messaging and integration solutions.

Some of the core capabilities provided by the ESB Guidance include:

• Policy driven mediation:
  • Itinerary-based service invocation that supports lightweight service composition at the time of message publication. The Itinerary mechanism dynamically resolves service endpoints and mediation requirements, and routes messages using any resolver that ships with the Guidance. This approach allows developers to implement loosely coupled patterns such as VETO/VETRO.
  • Provides dynamic resolution of endpoints and maps using the Microsoft ESB Guidance Resolver and Adapter Provider Framework. This supports dynamic resolution of endpoints and transformation requirements, as well as providing custom configuration to services, effectively decoupling the consumer from the services. 
  • Exception Management Framework for unified exception handling, mediation and reporting.
• Connecting systems: 
  • Performs namespace normalization of messages.
  • Provides IBM JMS/WMQ connectivity.
  • Supports messaging patterns that enable dynamic service aggregation, message routing, message validation, and message transformation.
  • Incorporates service registry and repository integration using UDDI and WS-MetadataExchange.
• Management and monitoring:
  • Includes the ESB Management Portal that provides:
    • Exception mediation and fault management.
    • Message repair and resubmission.
    • Exception notification and alert engine enabling user/group subscriptions.
    • BizTalk endpoint and registry integration, management, and publication.  Support auto publication from the BizTalk Administration Console
    • Reporting and analytics for exceptions, alerts, subscriptions and registrations.
    • Basic auditing on message saves, edits and resubmits
• SOA governance:
  • Provides integrated SOA governance solutions developed by AmberPoint and SOA Software.

Bookmark It

Hide Sites

We've officially launched a new website dedicated to providing invaluable information around building Services Oriented Architecture (SOA) and Business Process Management (BPM) solutions using the Microsoft platform.  As a part of this site, we've released our latest roadmap and product strategy around the next generation of Microsoft SOA-based technologies, codenamed "Oslo", to included updated messaging and workflow technologies in BizTalk Server and other products starting in 2009.

The "Olso" vision will leverage the next version of BizTalk Server as it's primary delivery vehicle for delivering a superior SOA infrastructure, but that's not all.  "Olso" will also feature updates to the Visual Studio development environment and the System Center line of systems management products as well as provide the appropriate infrastructure support to support business-to-business composite applications.

This is going to be an exciting ride in the world of SOA, and Microsoft will be right there in the mix!

Bookmark It

Hide Sites