Windows Azure Platform Developer Center > Azure Forums > AppFabric > How to use ACS for Service Bus authorization?
Ask a questionAsk a question
 

AnswerHow to use ACS for Service Bus authorization?

  • Tuesday, October 27, 2009 7:58 PMSimonKerney Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    All I want is to create two+ users (different user names and passwords) with different permissions for accessing my Service Bus solution (differing only by services withing that solution they can call). What's the easiest way to do it?

    I tried to configure claims and rules on the portal but that seems to imply there's always just one user (owner of the account) and the rest is handled by other identity providers (which I don't have) or Windows Live Id, but even with Windows Live Id it is unclear how to implement - there's not a single example out there on how to use it with ACS.

Answers

  • Wednesday, October 28, 2009 3:33 AMYi-Lun LuoMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hello, one solution has a single user. You can create multiple solutions to obtain more than one user. The only identity of the username claim is the solution's name. So if you have to solutions, and solution A is the main solution, you can configure a rule so that solution A has full access to the service, and solution B only have send access. If you have other claim providers (such as your local Geneva Server), you can also configure a rule for them. However, Windows Live ID will no longer be supported from the next release. But it may come back in a future release.
    Lante, shanaolanxing This posting is provided "AS IS" with no warranties, and confers no rights.

All Replies

  • Tuesday, October 27, 2009 11:05 PMSimonKerney Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Let me ask another question - does ACS support having multiple users of the same solution on its own or this scenario is only handled by using other issuers?
  • Wednesday, October 28, 2009 3:33 AMYi-Lun LuoMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hello, one solution has a single user. You can create multiple solutions to obtain more than one user. The only identity of the username claim is the solution's name. So if you have to solutions, and solution A is the main solution, you can configure a rule so that solution A has full access to the service, and solution B only have send access. If you have other claim providers (such as your local Geneva Server), you can also configure a rule for them. However, Windows Live ID will no longer be supported from the next release. But it may come back in a future release.
    Lante, shanaolanxing This posting is provided "AS IS" with no warranties, and confers no rights.