.NET Access Control Service

Take the Pain out of Access Control

The Microsoft® .NET Access Control Service helps you avoid the complicated programming that is normally required to secure applications that extend beyond organizational boundaries. With its support for a simple declarative model of rules and claims, Access Control Service rules can easily and flexibly be configured to cover a variety of security needs and different identity-management infrastructures.


For example, if your customer is reluctant to create and manage thousands of user accounts for an application on your Web site, you can use Access Control Service to federate the customer's existing identity management system. Whether the customer uses Active Directory® service, other directory systems, or any standards-based infrastructure, just configure Access Control Service for it, and your application responds as if the customer’s user accounts were managed locally.


Built on secure, standards -based technologies, Access Control Service enables interoperability between systems and can be used on its own or with other services, such as Microsoft SQL Services and Microsoft .NET Service Bus.


Overview
Bullet icon

Federated Identity and Access Control

Access Control Service can federate with third-party Secure Token services to support processing identities from existing systems or from external organizations.

Simplified Coding
  • Issuer trust can be set up with a simple Web interface or programmatically through APIs
  • The service directly supports Active Directory and other identity infrastructures, with minimal coding
  • Service Bus endpoints can be secured with a Web interface or programmatically, based on Access Control Service rules
Bullet icon

Flexible, Standards-Based Service

The Access Control service supports industry-standards and Web and security protocols to protect many different kinds of resources.

Multiple Credentials
  • Windows Live IDs
  • X.509 certificates
  • Traditional user names and passwords
  • Managed card and personal cards
  • Web Service specifications (WS-*)
  • REST
  • Applications that run both inside and outside organizational boundaries can rely on the service
  • Data and connectivity services can use the Access Control Service to validate application and user requests
Bullet icon

Lightweight, Developer-Friendly Programming Model

Because the Access Control Service offers developers an entire infrastructure that supports using familiar programming frameworks and Web protocols, it’s easy to integrate your applications with many different platforms and architectures.

Fast Ramp-Up
  • Access Control Service aligns with your existing experience in the Microsoft .NET Framework and Windows® Communication Foundation

Access Control Diagram

Take a Closer Look

Developer Resources on MSDN

.NET Services