1960 1980 2000 …

Windows Azure

AppFabric

Windows

Azure

SQL

AzureWindows

Azure

Marketplace

Applications and Data

Windows Azure

AppFabric

SQL

AzureWindows

Azure

Marketplace

Storage

Connect

Compute

Fabric

Controller

Applications and Data

Windows

Azure

CDN

StorageCompute

Applications and Data

FabricController

Fabric Agent

RoleInstances

Fabric Agent

Storage

CDN

Connect

Fabric

Controller

Windows Azure

AppFabric

Windows

Azure

Windows

Azure

Marketplace

SQL Azure Database

Data

SQL

Azure

SQL AzureReporting

SQL AzureData Sync

Windows

Azure

SQL

AzureWindows

Azure

Marketplace

Windows Azure

Windows Azure

AppFabric

Service Bus Access Control Caching

HD Large Plant Green Button Microsoft Azur.avi

Compute Storage

CDN

Connect

Applications and Data

FabricController

Windows AzureCompute

RoleInstances

On-PremisesWindows Computer

Applications and Data

Endpoint Agent

IPsec

CachingAccess Control

Windows Azure

Service Bus

Registry

4) Invoke operation on Service Bus endpoint

3) Discover Service Bus endpoint

Client (On-premises or

cloud)

WCF Service(On-premises)

2) Expose Service Bus endpoint

Service Bus

1) Register service endpoint

5) Invoke operation on service endpoint

Windows Azure

CachingService Bus

Access Control

Application(On-premisesor cloud)

Identity Providers (IdPs)

AD FS 2.0

Windows Live ID

Google

FacebookYahoo . . .

2) Authenticate user, then return

IdP token

IdP Token

1) Access application and get redirected to IdP

4) Validate IdP token, then create Access Control (AC) token according to

rules for this application

Rules Engine

5) Return Access Control

tokenAC Token

3) Send IdP token to Access Control

IdP Token

7) Validate Access Control token, then

use its claims

6) Submit Access Control

token

AC Token

Access Control

Browser

Windows Azure

Access ControlService Bus

Windows Azure

Application

Caching Service

Cached Data

Cached Data

Cached DataCached Data

Caching

Client