configuring claims using live id

Question

I know there is a lot of information on this floating around, I've been reading lots of posts / blogs / samples, but still have a few question I'm looking for help with....

I know how to authenticate with LiveID and get back the logged on user's ID and name and such, what I can't figure out is how to translate that into a username / password that gets sent to ACS to get a token.  I assume I need to create an issuer (or just a rule??) to map the approved liveID's to the rules that I define.

I can create an issuers for each valid liveID in my system, but then I have to maintain a mapping of issuername / key to the live id and that just leaves another item which needs to be secured.

Am I missing something here?

Answer 1

Hi,

You needn't create one ACS issuer for each LiveID user. You could create a STS which would authenticate the user by Windows Live service, then wrap the LiveID info into SAML token, and then, user send SAML to ACS to get SWT token. In this way, you only need create one issuer for the STS.

Thanks,

---

Mog Liang