Ensure that students understand the difference between authentication and authorization. Also, explain why encryption might be necessary even with authenticated clients. Explain that the .NET Framework can assist with authorization and authentication. Explain the limitations of using Windows authentication and the IIS supported authentication mechanisms. | msdn training Module 7 Securing Web Services Contents Overview 1 Overview of Security 2 Built-In Authentication 11 Custom Authentication SOAP Headers 21 Authorization Role-Based Security 27 Authentication Code Access Security 35 Encryption 43 Lab 7 Securing Web Services 51 Review 64 Microsoft Information in this document including URL and other Internet Web site references is subject to change without notice. Unless otherwise noted the example companies organizations products domain names e-mail addresses logos people places and events depicted herein are fictitious and no association with any real company organization product domain name e-mail address logo person places or events is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright no part of this document may be reproduced stored in or introduced into a retrieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise or for any purpose without the express written permission of Microsoft Corporation. Microsoft may have patents patent applications trademarks copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft the furnishing of this document does not give you any license to these patents trademarks copyrights or other intellectual property. 2001 Microsoft Corporation. All rights reserved. Microsoft MS-DOS Windows Windows NT Active Directory Authenticode Biztalk Intellisense Jscript MSDN PowerPoint Visual Basic Visual C Visual C Visual Studio Win32 and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the . and or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Module 7 Securing Web Services iii Instructor Notes Presentation
