leastprivilege.com
Requesting Delegation (ActAs) Tokens using WSTrustChannel (as opposed to Configuration Madness)
Delegation using the ActAs approach has some interesting security features A security token service can make authorization and validation checks before issuing the ActAs token. Combined with proof …