Wednesday, 7 February 2007
Open Source CardSpace Apache Module - now available
The Apache Authentication Module for CardSpace allows applications using an Apache Web server to use Information Cards as an additional authentication mechanism. It allows LAMP-based Web applications written in Perl or PHP to act as CardSpace relying parties (RP) by means of simple configuration. The module is responsible for decrypting the token submitted by the CardSpace identity selector, retrieving the claims and making the claims available for the application’s use.
“This is an amazing new piece in the identity puzzle,” said Kim Cameron, Chief Architect for Identity and Access, Microsoft Corporation. “Now the benefits from Information Cards and Windows CardSpace can be extended to the full group of Apache users to enable increased security against phishing attacks.”
