Microsoft provides two modes for using .NET Passport on your Web site: pre-production (PREP) mode and production mode. When you initially install the SDK on your Web server, your Web site operates in PREP mode. You can use this mode to test your development environment. First, however, you need to register your Web site with the .NET My Services Manager at https://www.netmyservicesmanager.com/wizard. When you do so, you receive a site ID and a site-encryption key that you install on your Web server. You then use Passport Manager to configure the site ID. After you complete your development and testing, you must apply to Microsoft to certify your Web site as a participating .NET Passport site. You also need to sign a .NET Passport agreement confirming that your Web site will comply with Microsoft's privacy and security policies.
When you've completed testing, you use Passport Manager to change from PREP mode to production mode. If you need to deploy the .NET Passport software on a server farm, you can use the Passport SDK setup.exe utility to record the installation on one server, then silently replay the installation on other servers.
The Passport SDK documentation provides step-by-step instructions about setting up a participating Web site and implementing the SSI, EP, and Kids Passport services. I suggest that you study this document before you develop your .NET Passport—enabled Web site. At the time of this writing, Microsoft charges participating Web sites an annual fee to use .NET Passport user-identification and -authentication services; Microsoft might also impose additional charges depending on a site's usage of the services (contact Microsoft for specific licensing costs).
Your Passport to Easy User Management
Microsoft's .NET Passport is a great example of how to centrally manage your Web site's user information and also provide an easy and efficient way for your users to access your site's services. To provide interoperability with other systems, Microsoft is implementing the Kerberos standard in .NET Passport user authentication. Although controversy over .NET Passport's privacy and security repercussions has been brewing in the industry, users don't seem to be holding back: At the time of this writing, several hundred million users have signed up to .NET Passport. Also at the time of this writing, more than 100 participating Web sites are in production mode and approximately 200 Web sites are in PREP mode. Vendors seem to be warming up to the idea that they can take advantage of this central user-identity management tool and focus their resources on developing e-commerce applications.
End of Article
