...Microsoft is supporting “claims-based” authentication, in which users can gain access to systems using “claims” about their identity that are issued and signed by recognised organisations, either within the same corporate entity or by an external entity. This approach integrates Microsoft's own technology such as InfoCards and open standards such as SAML assertions. However, Microsoft is not yet going as far as to adopt SAML protocols for web security. Its main focus is on the infrastructure mechanisms that form the foundation of access and authentication activity, rather than the user interface or any particular form of authentication...