How to connect a in-browser silverlight client to the ACS - Azure - WIF - Entity-framework (public and private DB model) - silverlight

Question

Hello dear contributors!
I am stalling again, I have researched for a tutorial or some directions as to how to adapt this wonderful tutorial:
http://msdn.microsoft.com/en-us/WAZPlatformTrainingCourse_ACSAndWindowsPhone7
To a in browser silverlight application instead of the windows phone ? I'd like to keep the current model, with public and private databases and ideally plug the silverlight application into the azure social games pack :
https://github.com/WindowsAzure-Toolkits/wa-toolkit-games
Which uses a similar ACS pattern, the directions I need are regarding the client handling of Oauth2.
Thanks in advance for any help in this matter.

Answer 1

If it's an in-browser silverlight application, why don't you treat it as a regular website? The flow will be something like
The user browse your app
Before you send the XAP, your website shows the list of identity providers. The user pick one and gets redirected to log in.
User logs in and you will get a token posted to your app (which is the Social Gaming Toolkit). The good news is that the Social Gaming Toolkit already provides integration with ACS on the website so there is not much work to do. The user will get a cookie generated by Windows Identity Foundation with the claims inside (no silverlight involved for now).
Now you send the XAP and the Silverlight app gets loaded
From now on every request done from the XAP to your app (which will have the Social Games Toolkit) will have the Principal populated because the WIF cookie is sent in every request.
If you want to change the user experience a bit and instead of showing the identity provider list in a regular HTML/asp.net page, you want to do it from the Silverlight app (like the Windows Phone lab shows). Then you only need to consume the ACS JSON endpoint which lists your identity providers from your Silverlight app.
The toolkit is already doing that and you can extract the basic ideas from:
https://github.com/WindowsAzure-Toolkits/wa-toolkit-games/blob/master/code/SocialGames.Web/Services/AuthService.cs#L29
The request to get the list of identity providers in JSON looks like this:
https://your_servicenamespace.accesscontrol.windows.net/v2/metadata/IdentityProviders.js?protocol=wsfederation&realm=your_application_realm&version=1.0&context=some_contextual_data_youwanttokeepacrossredirects"
Finally, this lab should help you as well
http://msdn.microsoft.com/en-us/IdentityTrainingCourse_SilverligthAndIdentity2010
FWIW, the way the Windows Phone will works is by using the JavaScript notify endpoint in ACS, which is different from what I described above.
The flow is something like
Phone shows the login options (Facebook, LiveID, etc.)
User click on one of them
User is redirected to ACS and then redirected to the chosen identity provider
User logs in and some kind of token is sent back to ACS (depending on the identity provider)
At this point ACS will render an HTML page with a bit of JavaScript. This will instruct the browser (which is hosted in your Windows Phone) to send an external signal with a payload (the token in this case).
window.external.Notify('THE_TOKEN');
The phone app will detect the notification and grabs the token
I'm not sure how the JavaScript notify mechanism will work on a Silverlight in-browser application because you are already in the browser. But if you try that, keep us posted.
Matias