Are there any other requirements from Windows Live ID through the ACS 2.0 identity provider?

Question

I understand that at present, the default Windows Live ID authentication provider in ACS 2.0 only provides two claims: a name identifier (a unique base64 identifier associated with the user and your application, but useless to describe someone) and an identprovider statement that lets you know that you are talking with LiveID. I was wondering if I could set up an alternate identity provider for the Windows Live ID, which could provide name information and other Live ID profile information through additional claims.

Thanks, -Patrick

Answer 1

You cannot get anything other than claims nameidentifier and identityprovider using the Windows Live Identity provider. http://msdn.microsoft.com/en-us/library/gg185944.aspx

Other vendors available for Azure ACS 2.0 are listed in detail here. http://msdn.microsoft.com/en-us/library/gg185971.aspx

FYI - Google and Yahoo as IP provide additional but optional claims emailaddress and name . So you can also get an example, John Doe and [e-mail].

Please note that using these two optional statements will tell the user that they will work with your services the first time you log in. At this time, the user can cancel the operation. I recommend that you get only the claims that you really need, as this can scare potential users.

Answer 2

I researched this before and found that the direct answer is no.

However, you can use ADFS in the chain with ACS to add more requirements.

It seems that setting LiveId allows you to publish a token to get information like

 { "id": "b6b2a7e8f2515e5", "name": "Apurva Dalia", "first_name": "Apurva", "last_name": "Dalia", "gender": null, "link": "http://cid-b6b2a7e8f2515e5.profile.live.com/", "locale": "en_US", "updated_time": "2011-10-26T21:13:05+0000" } 

If this is true, you can enter this information to the caller.

See server side scripts in the Live SDK.

From another Microsoft site:

For example, the following GET request without an access token specified would return general profile information. https://apis.live.net/v5.0/8c8ce076ca27823f

The information returned by Windows Live will look like this.

"id": "8c8ce076ca27823f", "name": "Roberto Tamburello",
"first_name": "Roberto",
"last_name": "Tamburello",
"gender": null, "locale": "en_US"