I got a message from Sidar Ok on Twitter the other day asking about the pros and cons of Windows Identity Foundation (WIF). I put together the following list when replying to him, but wanted to share it with the community as well
Pros
Pros
- Makes it much simpler to implement an STS then it is with just .NET and WCF
- Unified programming model across multiple platforms including WCF and ASP.NET
- Support for WS-Trust
- Support for WS-Federation
- Support for SAML 1.1 and 2 tokens
- Large amount of docs, books, mags, blogs, docs and community relative to its age
- Good tool support (e.g., Visual Studio and and FedUtil)
- No support for SAML 1.1 or 2 protocols
- Can't be installed on Windows XP
- Unpolished support for other platforms (e.g, Silverlight, ASP.NET MVC, etc.)