Windows CardSpace (formerly code-named "InfoCard") is part of .NET 3.0 and provides a standards-based interoperable solution for managing diverse digital identities. With phishing attacks and identity theft deterring people from the Web, CardSpace makes it safer and easier for users to manage online identities and authenticate themselves to web sites and services.
After an introduction to identity management, this session will provide a step-by-step tour of how CardSpace implements the identity metasystem. We’ll cover how CardSpace fits into the .NET 3.0 framework, how it uses Windows Communication Foundation (WCF) for its WS-* web-services stack, and how security tokens are issued by the Security Token Service. We’ll also tackle Identity Providers and Relying Parties, including High Assurance certificates, and finally, how to use CardSpace from Windows- and browser-clients.