Recent update: 2008-3-21
Hi folks,I'm at DIDW in Santa Clara right now, and I've been so busy some things haven't got answered. I'll catch back up on Friday, and catch up on the outstanding threads.Additionally, I've got a new demo/sample that has end-to-end functionality in with account recovery, just-in-time ...
HII have locally installed infocardbrowswer sample appln. and while trying to login using infocard it is causing following exception. Server Error in '/' Application. The handle is invalid.Description: An unhandled exception occurred during the execution of the current web request. Please ...
Dear all,I have encountered a problem while running the VB script for installing certificate. I does not have this problem when I try to install it on a laptop. However, this problem comes when I try to create the cardspace environment in a virtual machine using VMware.The error message is "The ...
4785 byte By
OlliP at 2008-3-3
Hi,it looks like I could need some help. My situation is following:- I create DIY cards through some homegrown Java code- I sign these DIY cards with Apache xmlsec version 1.3 (latest release). Verification works with this toolkit.- The CardSpace application always refuses to import the crd ...
When I run Windows CardSpace,It show a System.ExecutionEngineException! Why?
The .NET 3.0 Framework Release Candidate 1 has been uh, released!I'll be posting a "New for CardSpace in RC1" document tomorrow, and in the next couple of days, I'll post the samples revised as well. Get it here: ...
HiWe have created a managed card provider and STS. We have followed the following steps 1. Installed the Card provider certificates 2. Provided ACL for those certificates 3. Hosted the STS in IIS 4. Set SSL for the Card Provider Certificate Now when we use the card, the cardspace is unable to ...
As i posted my last comment to this board, a leaflet was dropped on my desk called "A New Identity". Now, i am finishing up some consultancy for a large UK Bank and with this timely leaflet i started to think about how versioning of identity information would work.So say in the past you did ...
Hopefully, that got your attention.We're starting to sketch out designs for the next version of CardSpace. I'm starting this thread and makin' it sticky so we can continue a dialog around new features.Now, I realize that CardSpace ain't even out the door yet, but the planning is beginning. ...
Hi,Is it possible to request a certain claim, while giving the user a choice between multiple issuers? For example: a relying party needs your name, and it has to be certified by organisationA, organisation B or organisation C.If it is possible, how does it look like in WS-SecurityPolicy? Can ...
Hello,I've been looking at CardSpace for a while and haven't run across anything that explicitly discusses its use in public places. Are there any plans for using these cards at work, school, etc. without having to recreate the card (or copy it via email or a flash drive)? And more ...
Anyone have any pointers on how CardSpace [could be]/[is intended to be] used with WCF net.p2p (or similar) technology? steven <a title=" http://stevenR2.com" href=" http://stevenr2.com/default.htm"> http://stevenR2.com</a>
Reference: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=659284&SiteID=1So, I guess most of us have asked this same question. I am not able to get the Certificate Authentication Scenarios to work with Simple STS as well.It seems like the problem stems from the Cardspace Agent UI ...
Hi,Is it possible to request a certain claim, while giving the user a choice between multiple issuers? For example: a relying party needs your name, and it has to be certified by organisationA, organisation B or organisation C.If it is possible, how does it look like in WS-SecurityPolicy? Can ...
Anyone have any pointers on how CardSpace [could be]/[is intended to be] used with WCF net.p2p (or similar) technology? steven <a title=" http://stevenR2.com" href=" http://stevenR2.com"> http://stevenR2.com</a> </span>
So, I noticed that the privacy policy is an xml file extension or was it jus a dud ? Does anyone know the schema for that ?
Can I use a smartcard which contains my X509 Certificate with Card Space ? So could Card Space send informations which have to be sign to the smartcard ? Thanks, Franck. </span>
I spent some tome poking around with the intent to find a sample which demonstrated how a desktop application can use CardSpace infrastructure to authenticate itself to a Web Service (Web application). Did not find any.Can someone please point me in the right direction? Alternatively, if such ...
4787 byte By
OlliP at 2008-2-16
Hi,it looks like I could need some help. My situation is following:- I create DIY cards through some homegrown Java code- I sign these DIY cards with Apache xmlsec version 1.3 (latest release). Verification works with this toolkit.- The CardSpace application always refuses to import the crd ...
Hello,I've been looking at CardSpace for a while and haven't run across anything that explicitly discusses its use in public places. Are there any plans for using these cards at work, school, etc. without having to recreate the card (or copy it via email or a flash drive)? And more ...
I have a question about the location of user data in Self-issued card. After I generate a self-issued card, where the user data is located? Does it save with self-issued card or does it save at self-issued identity provider storage? I’m not clear about it. Please help me. Thank you. ...
HiWe have created a managed card provider and STS. We have followed the following steps 1. Installed the Card provider certificates 2. Provided ACL for those certificates 3. Hosted the STS in IIS 4. Set SSL for the Card Provider Certificate Now when we use the card, the cardspace is unable to ...
I am building my own demo site based on the JulyCTP samples of "intro to CardSpace with IE7" and "decrypting a security token". Things are going well.I was wondering about the best way to get the Token attached to the Page.User so I can utilize the authentication and ...
Anyone have any pointers on how CardSpace [could be]/[is intended to be] used with WCF net.p2p (or similar) technology? steven <a title=" http://stevenR2.com" href=" http://stevenr2.com/"> http://stevenR2.com</a> </span>
Hi All, Can anybody tell me what certificates are required for importing an infocard into the digital identities and what is the need for them TIA.
I am building my own demo site based on the JulyCTP samples of "intro to CardSpace with IE7" and "decrypting a security token". Things are going well.I was wondering about the best way to get the Token attached to the Page.User so I can utilize the authentication and ...
Hi. I have played around a little with Netfx with CardSpace/InfoCard and it works well. Today i read most of the reference documentation. I didn't see an exact answer to my question, so maybe someone can point me at a part of one of the docs and even a sample :)I would like to ask for a ...
Reference: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=659284&SiteID=1So, I guess most of us have asked this same question. I am not able to get the Certificate Authentication Scenarios to work with Simple STS as well.It seems like the problem stems from the Cardspace Agent UI ...
HII have locally installed infocardbrowswer sample appln. and while trying to login using infocard it is causing following exception. Server Error in '/' Application. The handle is invalid.Description: An unhandled exception occurred during the execution of the current web request. Please ...
Hi,Is it possible to request a certain claim, while giving the user a choice between multiple issuers? For example: a relying party needs your name, and it has to be certified by organisationA, organisation B or organisation C.If it is possible, how does it look like in WS-SecurityPolicy? Can ...
Hi,I think there may be a problem with the smartcard . This is because when the smartcard is inserted, the X.509 certificate is extracted from the smartcard and installed into the local machine/personal store. By this way, the certificate can be used for sending to the STS.However, the ...
I have hosted web application supporing "cardspace" locally on machine having july ctp & ie 7.0 beta 3 (IE: 7.0 v7.0.5450.4 ). on WIN 2003 & iis 6.0. The problem I am facing here is that during Login Process my web application does not popup the CARDSPACE selection window(Code ...
So, I noticed that the privacy policy is an xml file extension or was it jus a dud ? Does anyone know the schema for that ?
Hey guys, Great work on the July CTP samples! I was wondering, is IE7 the only web browser that can invoke InfoCards in CardSpace on the client? If so, any way or any plans to invoke from IE6 or FireFox? Thanks, Noremac
5526 byte By
itickr at 2008-2-7
I’m following the sample/document ‘Using the Simple STS’ and running into an issue. It’s probably something very basic that I have missed but I don’t seem to be able to figure it out. In a summary when I try to run the managed card scenario, I get the error ‘Identity provider end point was no...
Q1. How can I implement certificate authentication in the issue method of SecurityTokenService class (from the Sample STS)? Authentication is required if the security binding for X.509 certificate in app.config is "MutualCertificate".Q2. How can I retrieve the information of the info card such ...
I spent some tome poking around with the intent to find a sample which demonstrated how a desktop application can use CardSpace infrastructure to authenticate itself to a Web Service (Web application). Did not find any.Can someone please point me in the right direction? Alternatively, if such ...
I am trying to read the certificate from the smart card, but I am not sure what to put in for the value?Q1. what is the format of the value? (in FabrikamCertificate.ini)I tried the thumbprint of the certificate in the value. value=cdcff4a6d29f3f3b9fc63cd76cffe6c2103363a5 But i got problem when ...
Hi,I am working with Security WCF concept. I got an example UsernameToken from Microsoft site. I am unable to run the service when it is self hosted in IIS, where as I am able to run from VS 2005 IDE. It is giving error like the followingCould not load type ...
After running sample.htm, and try to send the self issued authentication managed card to the server. the following error occurs.Line 49: return GetResourceValue(claim);Line 50: }Line 51: throw new ArgumentException(String.Format("Claim {0} not found", uri));Line 52: }Line 53: ...
I've posted another sample, this time a Simple STS!With that you should be able to do complete end-to-end scenario testing with CardSpace. It's pretty darn lightweight, and doesn't provide a whole lot of anything, but it's simple enough to understand without too much ...
4785 byte By
OlliP at 2008-2-5
Hi,it looks like I could need some help. My situation is following:- I create DIY cards through some homegrown Java code- I sign these DIY cards with Apache xmlsec version 1.3 (latest release). Verification works with this toolkit.- The CardSpace application always refuses to import the crd ...
I am sure there is something I am missing out here but I have no idea what.In my STS Config, I have this: <services> <service name="Softwaremaker.Security.SecurityTokenService.SecurityTokenService" behaviorConfiguration="stsBehavior"> <endpoint ...
Has anybody attempted to incoorporate PingTrust (Java STS) with MS Cardspace? Please shed some lights on how can I approach? Thanks!
You can find a new CardSpace sample that shows the nitty-gritty of decrypting a SecurityToken: http://cardspace.netfx3.com/files/folders/samples-july-ctp/entry5152.aspxThis contains the code for a new Token class, (derived from TokenHelper) which exposes a few more features, to be discussed in ...
Hi, Just like to mention that CardSpace doesn't work on a FAT32 formatted drive, have read a lot of reports of people getting hung up on this. NTFS is apparently a lot more secure. ...
Hi I have a scenario where the user needs to select the mode of authentication to my system. The users can either use Infocard or the traditional way of Username-Password Authentication. If the User selects the infocard then the digital Identities applet should popup for the user to select the ...
Hi,I am in the midst of porting over the Remote STS samples (from here) to the July CTP. I am faced with an issue that I totally have no idea how to solve.My Service config behaviour config looks like this: <serviceBehaviors> <behavior name="serviceBehavior"> ...
I have unzipped and installed the batch file in 'Creating Managed Cards.zip'. The batch file displays success for all 4 installations : 'CAPICOM, Certificates, host, web sites'.However, when the browser attempts to enter the page https://www.fabrikam.com/CardSpace the following message ...
2183 byte By
OlliP at 2008-2-2
Until recently I was under the impression that the holder-of-key confirmation would be mandatory in CardSpace aka InfoCard. E.g. the Technical Reference for InfoCard v1.0 in Windows states on p. 5: "The subject confirmation method is always specified as “holder of key” and is identified by ...