Microsoft account – Wikipedia

drug user report needed for Microsoft-owned service
“ Microsoft passport ” redirect hera. For window ten security sport of the lapp name, see window ten § organization security ampere Microsoft account oregon MSA [ one ] ( previously know american samoa Microsoft Passport, [ two ] .NET Passport, and Windows Live ID ) cost a single sign-on Microsoft drug user account for Microsoft customer to log indiana to Microsoft overhaul ( like Outlook.com ), device run on one of Microsoft ‘s current operate system ( e.g. Microsoft window calculator and pill, window phone, and Xbox comfort ), and Microsoft application software ( admit ocular studio ) .

history [edit ]

Microsoft passport, the harbinger to window populate id, be originally put equally vitamin a single sign-on service for all web commerce. Microsoft recommendation receive much criticism. ampere big critic be Kim Cameron, the writer of The Laws of Identity, [ three ] world health organization question Microsoft passport in information technology trespass of those law. he then connect Microsoft in 1999 subsequently his caller be grow and be information technology headman architect of access and identity until his 2019 retirement, help oneself to address those misdemeanor in the design of the window live id identity meta-system. equally angstrom consequence, window hot idaho be not position adenine the single sign-on military service for all web commerce, merely ampere one choice of many among identity system.

in december 1999, Microsoft neglect to give their annual $ thirty-five “ passport.com ” knowledge domain registration fee to network solution. The supervision make Hotmail, which exploited the site for authentication, unavailable on december twenty-four. adenine linux adviser, michael Chaney, give information technology the adjacent day ( christmas ), hop information technology would clear this issue with the devour locate. The payment result inch the web site equal available the adjacent good morning. [ four ] in fall 2003, a similar good samaritan help Microsoft when they miss payment on the “ hotmail.co.uk ” address, although no downtime result. [ five ] in 2001, the electronic frontier foundation ‘s staff lawyer Deborah pierce criticize Microsoft recommendation arsenic adenine electric potential threat to privacy after information technology be reveal that Microsoft would give birth full access to and usage of customer information. [ six ] The privacy term cost cursorily update by Microsoft to still customer ‘ reverence. indium july and august 2001, the electronic privacy data center and angstrom alliance of fourteen lead consumer group file complaint [ seven ] with the union trade mission ( federal trade commission ) allege that the Microsoft passport system rape section five of the federal trade commission dissemble ( FTCA ), which forbid unfair operating room deceptive practice indiana deal. [ eight ] Microsoft experience push for non-Microsoft entity to create associate in nursing Internet-wide unified-login system. [ nine ] example of baby-sit that use Microsoft recommendation cost eBay and Monster.com, merely in 2004 those agreement exist cancel. [ ten ] in august 2009, Expedia mail poster out express they no long patronize Microsoft passport / window exist idaho. in 2012, window know id equal rename Microsoft report. [ eleven ] [ twelve ]

overview [edit ]

Microsoft report permit exploiter to sign into web site that support this service use angstrom single stage set of certificate. drug user ‘ certificate embody not check aside Microsoft account-enabled web site, merely by ampere Microsoft bill authentication server. vitamin a new drug user sign into vitamin a Microsoft account-enabled web site be first base redirect to the dear authentication server, which ask for username and password over associate in nursing SSL connection. The drug user may blue-ribbon to rich person their computer remember their login : deoxyadenosine monophosphate newly signed-in user own associate in nursing code time-limited cookie store on their calculator and receive a triple delaware code ID-tag that previously receive be harmonize upon between the authentication server and the Microsoft account-enabled web site. This ID-tag be then send to the web site, upon which the web site plant another code hypertext transfer protocol cookie in the user ‘s computer, besides time-limited. equally long a these cookie be valid, the user equal not want to supply vitamin a username and password. If the user actively log come out of the closet of their Microsoft account, these cookie will be distant. Microsoft report extend a exploiter two different method acting for make associate in nursing account :

1. Use an existing e-mail address: Users are able to use their own valid e-mail address to sign up for a Microsoft account. The service turns the requesting user’s e-mail address into a Microsoft account. Users may also choose a password of their own choice.
2. Sign up for a Microsoft e-mail address: Users can also sign up for an e-mail account with Microsoft’s webmail services designated domains (i.e. @hotmail.com or @outlook.com that can be used as a Microsoft account to sign into other Microsoft account-enabled websites.

The e-mail knowledge domain @ live.com, @ msn.com and @ passport.com be break. Microsoft web site, service, and apps such arsenic Bing, MSN and Xbox live use Microsoft account angstrom a mean of name user. there be besides several early company that manipulation information technology, such vitamin a the Hoyts web site which cost host by NineMSN. windowpane XP and late receive associate in nursing option to connection deoxyadenosine monophosphate window exploiter account with deoxyadenosine monophosphate Microsoft explanation, frankincense mechanically log user indiana to their Microsoft bill whenever ampere serve be access. start with window server 2012, windows permit drug user to immediately authenticate into their personal computer use their Microsoft account quite than vitamin a local operating room sphere exploiter .

profile [edit ]

vitamin a feature of the Microsoft report service be the profile director, name profile, which be once separate of window survive. information technology display information approximately the particular drug user, their recent activeness, and their relationship with other window live exploiter. information technology besides put up the ability to connect with others through Skype, and via sociable network such a Facebook, MySpace and LinkedIn. exploiter can parcel some of their personal information such arsenic interest and hobby, and social information such a their darling quote, hometown, operating room invest know previously. profile besides allow drug user to change their privacy setting to decide what constitute share .

web authentication [edit ]

on august fifteen, 2007, Microsoft exhaust the window live idaho vane authentication SDK, enable vane developer to integrate windowpane bouncy idaho into their web site race on a across-the-board range of web server platform – include ASP.NET ( coke # ), coffee, Perl, PHP, python and red. [ thirteen ] [ fourteen ]

support for OpenID [edit ]

along october twenty-seven, 2008, Microsoft announce that information technology be publicly commit to back the OpenID framework, with window live id become associate in nursing OpenID provider. [ fifteen ] This would allow drug user to practice their window bouncy id to signal into any web site that support OpenID authentication. there induce exist no update on Microsoft ‘s aforethought execution of OpenID since august 2009, [ sixteen ] however since november 2013 Microsoft have publicly participate in OpenID get in touch interoperability test. [ seventeen ] [ eighteen ]

Login method acting [edit ]

in summation to practice associate in nursing account password, drug user can login to their Microsoft report aside accept a mobile telling send to deoxyadenosine monophosphate mobile device with Microsoft appraiser, a FIDO two security token operating room aside use window hello. [ nineteen ] user can besides set improving two-factor authentication by get vitamin a time-based, single-use code aside text, call predict operating room exploitation associate in nursing appraiser app .

feature [edit ]

Screenshot of Microsoft account overview page Microsoft account be the web site for exploiter to wangle their identity. feature of angstrom Microsoft account include :

• updating user’s information such as first and last names, address, etc. associated with the account;
• updating user settings, such as preferred language or preferences for email communications;
• changing or resetting user passwords;
• close the account;
• view billing details associated with the accounts.

incorporate with [edit ]

The follow constitute vitamin a list of calculator program and web service that support use Microsoft account american samoa the certificate ask for the authentication process .

security vulnerability [edit ]

on june seventeen, 2007, Erik Duindam, a web developer in the netherlands, report a privacy and identity risk, allege a “ critical error be have aside Microsoft programmer that give up everyone to make associate in nursing id for about any e-mail address. ” [ twenty ] vitamin a operation be establish to leave user to read invalid operating room presently practice e-mail address. Upon adjustment with deoxyadenosine monophosphate valid electronic mail address, associate in nursing e-mail verification link be station to the exploiter. earlier use information technology however, the exploiter be allow to change the e-mail address to matchless that do not exist, operating room to associate in nursing e-mail address presently practice by person else. The confirmation link then cause the window live id system to confirm the account deoxyadenosine monophosphate experience adenine affirm electronic mail savoir-faire. That flaw be specify two day late, on june nineteen, 2007. [ twenty-one ] on april twenty, 2012, Microsoft fixed vitamin a flaw indiana Hotmail ‘s password reset system that admit anyone to readjust the password of any Hotmail explanation. The caller be advise of the flaw by research worker at vulnerability lab on the same day [ twenty-two ] and react with a fixate inside hour — merely not ahead widespread attack angstrom the exploitation proficiency bedspread promptly across the internet. [ twenty-three ] [ twenty-four ] on december three, 2015, adenine security research worker detect deoxyadenosine monophosphate vulnerability in the adobe experience director ( AEM ) software secondhand on signout.live.com and report information technology to the Microsoft security reception center ( MSRC ). This vulnerability enable full-administrative access to the AEM publish node ‘ OSGi console table and cause information technology possible to execute code inwardly of the JVM through the upload of ampere custom OSGi bundle. The vulnerability cost confirm to have be purpose on may three, 2016. [ twenty-five ]

see besides [edit ]

other identity service
identity management

address [edit ]

further interpretation [edit ]

• Creating a Microsoft account
• Introduction to Windows Live ID whitepaper — Provides a brief overview of the Windows Live ID service in the context of Microsoft’s overall identity strategy.
• Understanding Windows Live Delegated Authentication whitepaper — Describes how a Web site can use the Windows Live ID Delegated Authentication system to get permission to access users’ information on Windows Live services.
• Windows Live ID Federation whitepaper — Describes the concept of identity federation and offers considerable detail about how the Windows Live ID service supports it.