Benefits of Claims-Based Identity

Claims-based identity offers many advantages:

  • Outsourcing Authentication: Claims-based identity removes the management of authentication from the application to make it easier to manage accounts by centralizing authentication. As a result, your applications are not responsible for authenticating users, storing user accounts and passwords, looking up user identity details, or integrating with other identity systems. This allows you to focus on building the web application or service because identity-related requirements are handled by external issuing authorities. Centralizing authentication also makes it easier to upgrade to stronger authentication methods in the future.

  • Supporting Multiple Authentication Providers: Claims-based identity allows you to easily implement numerous authentication providers (Windows Live ID, Windows authentication, Forms-based Authentication) for one site using a single sign-on to support users who access the web application or web service in different ways, such as from within the organization, through affiliated organizations, and over the internet.

  • Supporting Federation of Identities: Claims-based identity allows external users at other organizations to access your network applications using their own identities.

  • Extensibility: Claims-based identity offers more versatility because you can create additional attributes as claims on which to base access control.

See Also

Other Resources

Understanding Claims-Based Identity