If you are new to WIF, we recommend that you review the following announcements, introductory reference links and claims-related details provided in this section to learn more about this technology.   

Introduction to WIF

• Get Started with Windows Identity Foundation (WIF) 
• WIF Home Page
• WIF Frequently Asked Questions
• Windows Identity Foundation (WIF) Questions and Answers
• Federation Scenario
• WIF Workshops on Channel 9 [Video]
• Passive Authentication for ASP.NET with WIF
• Windows Identity Foundation (WIF) Wiki Articles

Overview of WIF

• WIF Overview
• MSDN WIF Overview
• Glossary
• 60 Seconds On Developing Claims Aware ASP.NET Web Applications And WCF Services Using AD FS

About Claims 

• The Role of Claims

About Claims-Based Identity & Applications

• Claims-Based Identity Overview
• Introduction to Claims-Based Identity and Windows Identity Foundation (WIF) [Video] 
• P&P: A Guide to Claims–based Identity and Access Control
• A Guide to Claims-Based Identity and Access Control
• Claims-Based Identity and Access Control Guide
• Understanding Claims-Based Applications: An Overview of AD FS 2.0 and WIF [Video]
• Windows Identity Foundation Whitepaper For Developers
• P&P: Online Resources

The following links can help you understand how WIF can work together with other technologies and products (both Microsoft and non-Microsoft) to provide single sign-on capabilities that span multiple boundaries and identity platforms. Note that several links in this section will jump you to community-created content that resides on web sites external to the TechNet Wiki.

Windows Azure Applications Platform

• WIF and Windows Azure Applications [Video] 

Windows Azure Appfabric Access Control Services (ACS)

• Windows Azure AppFabric ACS Content Map
• Windows Identity Foundation (WIF) and Azure AppFabric Access Control Service (ACS) Content Map
• ACS and WIF

Integration with Microsoft on-premises products 

• Using Active Directory Federation Services 2.0 in Identity Solutions  
• AD FS 2.0 Federation with a WIF Application Step-by-Step Guide 

Windows Identity Foundation (WIF)

• WIF Content Map

Windows SharePoint Services (WSS) 3.0 and Microsoft Office SharePoint Server 2007

• Microsoft Federation Extensions for SharePoint 3.0  

WIF and Windows Communications Foundation (WCF)

• WIF and WCF

Design and Deploy WIF                                     

The following links can help you get started with planning and deploying a specific WIF design in your production environment. 

Plan and Design

• Design Considerations
• Security Considerations
  
  Deploy
  

Manage WIF                                                           

The following links can help you understand how to manage and administer an existing WIF deployment.  

Monitoring

PowerShell

Security

Sign-in / Sign-out

• How to use Fiddler Web Debugger to analyze a WS-Federation passive sign-in
• How to invoke a WS-Federation sign-out

Tools

• Windows Identity Foundation (WIF) Tools

Troubleshoot WIF                                                 

This following links can be used to help you locate the cause and resolution to common problems that may occur in your existing WIF infrastructure.   

• Fiddler Inspector for Federation Messages 

Authentication / Authorization

• Windows Identity Foundation (WIF) Throws Exception: "ID6018: Digest verification failed for reference"
• Windows Identity Foundation (WIF) – The Difference Between ActAs and OnBehalfOf

Browser client errors

• Windows Identity Foundation (WIF): A Potentially Dangerous Request.Form Value Was Detected from the Client (wresult="<t:RequestSecurityTo...")
  

Certificates 

• Windows Identity Foundation (WIF): How to Change Certificate Chain Validation Settings for Web Applications

FedUtil

• Windows Identity Foundation (WIF): FedUtil.exe on Windows Server 2003 Fails: "Object Identifier (OID) is unknown." 

Installation / Setup

 

• Windows Identity Foundation (WIF): FedUtil.exe on Windows Server 2003 Fails: "Object Identifier (OID) is unknown."
• WIF SDK and Visual Studio 2008 addin failure

 

Logging / Tracing

• CRM 2011: How to Enable Verbose Windows Identity Foundation (WIF) Tracing for Claims-Based Authentication

WS-Federation
 

• Windows Identity Foundation (WIF): How to Utilize the WS-Federation WHR Parameter to Bypass Home Realm Discovery (HRD) 
• Windows Identity Foundation (WIF): How to Utilize the WS-Federation WAUTH Parameter to Specify an Authentication Type 

  Federation Authentication Module (FAM)

• Windows Identity Foundation (WIF): How to Protect Static Content with the Federation Authentication Module (FAM)  

  Additional WIF References                                                 

  Here you will find additional reference links to related developer content, software downloads and related technologies.        
  
  Developer References

  • WIF SDK [Download | Read Online] 
  • WIF SDK Class Library (WIF Object Model)
  • Install the Windows Identity Foundation (WIF) SDK
  • Windows Identity Foundation (WIF) Fast Track
  • Windows Identity Foundation (WIF) SDK Help Overhaul
  • Windows Identity Foundation (WIF) Code Samples
  • Configuration for Windows Identity Foundation
  • Windows Identity Foundation (WIF) Configuration Sections in ASP.NET Web.Config
  • Claims Consumer - Relying Party Applications
  • Claims Provider - Security Token Service
  • WIF Class Library and Namespaces
  • Windows Identity Foundation SDK
  • Microsoft Federation Extensions for SharePoint 3.0
  • A Hidden Gem: The WIF Config Schema
  • Token based Authentication and Claims for Restful Services
  • Mixing Forms and Token Authentication in a single ASP.NET Application
  • Mixing Forms and Token Authentication in a single ASP.NET Application (the Details)
  • Common Windows Identity Foundation WS-Federation Exceptions Explained

  Developer How-To
  

  • How to: Build an ASP.NET Relying Party Application
  • How to: Build a WCF Relying Party Application
  • How to: Programmatically Enable WIF on a WCF Service
  • How to: Access Claims in an ASP.NET Page
  • How to: Request a Token from the c2WTS
  • How to: Build an ASP.NET STS
  • How to: Build a WCF STS
  • How to: Enable Tracing
  • How to: Add a Custom Token Handler
  • How to: Display the Caller's Sign-In Status
  • How to: Invoke a WS-Federation Sign-Out with ADFS
  • How to: I Am Building A Web Form Application (ACS)
  • How to: I Am Building An ASP.NET MVC Web Application (ACS)
  • How to: I Am Building A SOAP WCF Service (ACS)
  • How to: I Am Building A REST WCF Service (ACS)
  • How to: Deploying Claims-Aware Application To Windows Azure
  • How to: Deploying Claims-Aware Application On Premises
  • How to: Migrate Existing ASP.NET Web Application To Claims Aware
  • How to: Switch to WIF SessionMode in ASP.NET
  • How to: Create Strongly Typed Claims
  • How to: Configure Single Sign-On from Active Directory to a Windows Azure Application
  • How to: Replace ASP.NET Forms Authentication with WIF Session Authentication (for the better)
  Software Downloads
  

    

  • WIF Software
  • WIF Extension for the SAML 2 Protocol (CTP Release)

  You can also download WIF via the Microsoft Web Platform Installer (Microsoft Download Center). Just search on keyword "identity" within the tool.

  Related Microsoft Products
  

  • Active Directory Federation Services 2.0
  • Windows Identity Foundation (WIF) 
  • Windows Azure AppFabric ACS 

  Related Open Standards
  

  • OASIS Standards-SAML and more
  • Kantara Initiative (formerly known as the Liberty Alliance)
  • Web Service Interoperability and Specifications (WS-*)
  • Web Service Interoperability (WS-I) Organization
  • OAuth
  • DotNetOpenAuth - OpenID, OAuth, and ICard 

   

  Community Resources                                                   

   

  The following resources can be useful for obtaining WIF community support and for keeping up with the latest WIF content updates and news.   
  
  

  Forums
  

    

  • Claims-Based Access Forum
  • WIF on stackoverflow
  • Windows Identity Foundation on stackoverflow

  Blogs
  

  • Claims-Based Identity Blog
  • Identity and Access Management
  • Security and Identity in the Cloud
  • Kim Cameron Identity Blog
  • Mike Jones - self-issued
  • Vittorio Bertocci  
  • Steve Syfuhs - Steve on Security
  • Dominick Baier - leastprivilege
  • Steve Peschka - Share-n-dipity
  • Matias Woloski - my facade
  • Alik Levin - Clarity, Technology, and Solving Problems