Just got back from Oslo and thought I might as well try to summarize what was learned.

• Microsoft announced the release of their JSON Web Token Handler for .NET 4.5.
• Thinktecture announced the release of version 3 of their IdentityModel project, updated to use the new Microsoft JWT Handler. This release also removes Simple Web Token support. They have been replaced by the JSON Web Tokens.
• Thinktecture also announced the release of their AuthorizationServer project which implements the four OAuth2 flows and is meant to be used side-by-side with an existing Identity Provider / Secure Token Service like their IdentityService project.
• OpenID Connect Working Group announced the availability of the second round of OpenID Connect Implementer’s Drafts. These are still drafts rather than the final specifications mainly because we are waiting for other dependencies, like JWT and JOSE (Javascript Object Signing and Encryption) to become finalized.

Finally, here are the slides from some of the presentations we attended:

• Securing ASP.NET Web API – Dominick Baier
• OAuth2 – The good, the bad & the ugly – Dominick Baier
• An Introduction to OpenID Connect – Pedro Félix

The full agenda for the conference is available here, and I am guessing they will be adding the videos of the talks in the not too distant future.