Home of Microsoft Updates and News

Last week Omar Shahine blogged about a new remoteness facilities in Windows Live, where we’ve done a little improvements which you goal you will conclude as good as find both absolute as good as easy to use. We additionally not long ago announced Windows Live Messenger Connect, an sparkling brand new underline set which enables you to simply bond to Windows Live from third celebration applications as good as lets you take your Windows Live knowledge as good as data, with your agree as good as during your discretion. Additionally, you additionally voiced a new Messenger (try it now), which provides a most finish pattern of what your friends have been you do opposite your amicable networks as good as pick pity sites, together with extensive formation with Facebook, LinkedIn, as good as MySpace.

We hold which you should be equates to to name to take your Windows Live interpretation with you when you transport a web. Messenger Connect allows you to do which by upon condition which a proceed to pointer in to third celebration web as good as patron applications regulating your Windows Live ID. Messenger Connect allows you to move your Windows Live form as good as contacts with you; simply share with your friends as good as capacitate Windows Live Messenger-based discuss inside of third celebration applications; as good as entrance your photos, calendar, as good as more. In sequence to capacitate third celebration applications to ‘connect’ as good as correlate with Windows Live accounts, you indispensable to pattern to assistance to guarantee which customers’ interpretation is stable as good as accessed in a demeanour unchanging with customers’ expectations as good as desires, as good as capacitate good partner experiences. These beliefs guided a pattern work:

Principle 1: Data portability (you own your data)

As a top-level principle, we hold which business own their data. Your temperament as good as profile, your residence book, your newsfeed, your photos, your documents: as a Windows Live customer, you own all which data. So you should be equates to to take which interpretation with you. Our purpose is to assistance you strengthen your data, assistance you have supportive decisions about how your interpretation is accessed as good as updated, as good as assistance you pier your interpretation to pick places similar to a PC. That equates to which if you would similar to to entrance your Windows Live interpretation from a opposite third celebration service, or even take your interpretation utterly to an additional service, you should be equates to to do that. To capacitate this, you give you ways to trade your interpretation from Windows Live in to usual formats, so which you can import it to wherever you like, as good as in most cases have this some-more seamless with proceed integrations with partners. In a universe where people have been joining services behind as good as onward from any other, this can be complex. Just to be clear, when you bond a single of your amicable networks (like Facebook, MySpace, as good as LinkedIn) to Messenger, any of your interpretation or your friends interpretation done permitted to Messenger around those connectors is governed by a partners’ policies as good as a agreements with them.

Principle 2: You have carry out over your data

As Omar discussed in his post, business should be equates to to simply carry out who has entrance to their interpretation in Windows Live. You trust Windows Live with your data, as good as it is usually permitted as good as permitted inside of Windows Live. But you additionally know which you might wish to be equates to to entrance your Windows Live interpretation in a third celebration applications or websites you use. For example, you might wish to share your photos or pick non-public interpretation with your friends. We have it probable for you to do so, though you have to give us your agree first. And, if during any point, you confirm you would similar to to devaluate a partner’s entrance to your interpretation – you should be equates to to simply do so.

Principle 3: Right interpretation for a right scenario

We hold which third celebration applications which entrance Windows Live should usually entrance a smallest volume of user report compulsory to finish a preferred scenarios. For example: if a web site usually needs accede to tell amicable updates, they shouldn’t additionally ask permissions for celebration of a mass photos.

Messenger Connect: Making my interpretation as good as my friends interpretation permitted in a obliged manner

There have been cases where hurdles as good as tradeoffs in between remoteness as good as interpretation portability exist. An e.g. of this tragedy is where a patron would similar to to share their finish residence book with a third party, as good as which residence book contains report such as email addresses as good as phone numbers. The essence of my residence book have been a multiple of “my information” as it is “my residence book” though might additionally embody my friends’ email addresses as good as phone numbers. These common interpretation tenure scenarios have been formidable as good as have supportive a pattern choices.

Independent of a report sort or have make make make make make make use of of of of of of of entrance being done available, you have been operative to reinstate unapproved “screen-scraping” models, which need business to share their usernames & passwords (“credentials”) in an unsecure demeanour with most sites, with a have have make make make make make make use of of of of of of of of of safer, bona fide APIs. The have have make make make make make make use of of of of of of of of of bona fide APIs as good as transparent user agree flows have been critical opposite a attention as they yield a safer pick to requiring business to share their certification with third parties. Moving third parties divided from shade scraping as good as a make make make make use of of of of of asking users for their certification though a have have make make make make make make use of of of of of of of of of APIs which have have make make make make make make use of of of of of of of of substituted authentication (more info) is critical since when you share your certification in a transparent these websites can right away action upon your behalf. Even if a web site is not malicious, your certification could be unprotected if a third celebration have make make make make make make use of of of of of of of is compromised. Use of APIs helps to foster patron credential security, enables resourceful avowal of report as good as a capability to devaluate access.

To assistance us guarantee customers’ remoteness as good as capacitate partner scenarios, we’ve combined dual graphic tiers of partner entrance policies. Both tiers need pithy patron consent, as good as follow a same confidence model, though have been permitted for opposite organisation of third parties.

1. Public APIs: Our “Public APIs” have been permitted to all developers as good as third parties to entrance in a self-service manner. Appropriate have have make make make make make make use of of of of of of of of is governed by a Terms of Use as good as Terms of Service, as good as is monitored for abuse reported by customers. Third parties can sign-up for entrance by a focus government apparatus during http://manage.dev.live.com.
2. Restricted APIs: Our “Restricted APIs” allows third parties to entrance some-more supportive report upon interest of customers. Therefore, these APIs have been indifferent for a name organisation of third parties categorically authorized by Microsoft, as good as encounter transparent as good as unchanging criteria.

It is value observant which inside of any process tier, you have supposing most ‘granular entrance scopes’, which concede third parties to ask entrance to specific sets of interpretation to finish a specific scenario. You can sense some-more about these scopes here.

The experience

So, let’s take a discerning demeanour during what a knowledge looks similar to when joining with third celebration applications by Messenger Connect.

Sign-in as good as consent. When you click a Windows Live ‘Connect’ button upon a third celebration website (explicit patron calm is required), it initiates a sign-in as good as agree experience.

The primary shade provides you with a capability to pointer in with your Windows Live ID, as good as sense about a turn of entrance a third celebration focus is requesting.

Making supportive decisions. When you click a “What will you share?” link, you get minute report about a specific pieces of interpretation as good as capabilities a focus is seeking to access.

Managing entrance to your data. At any point, you can revise your permissions for any third celebration focus inside of Windows Live as good as devaluate a entrance to your data.

Reporting abuse. In addition, you yield “Report abuse” links from a Windows Live services so which you can surprise us of any focus which might be violating a Terms of Service, or in all working in a proceed you find inappropriate. In impassioned circumstances, you additionally have a capability to postpone or devaluate a third celebration application’s capability to have have make make make make make make use of of of of of of of of Messenger Connect, to illustrate automatically revoking any permissions a patron postulated a third party.

I goal this post has since you a little discernment in to how you proceed your remoteness in Messenger Connect. As Omar previously noted, this is a severe complaint with most formidable dimensions, as good as a single which most in a attention go on to onslaught with as good as refine. We have been committed to invariably listening to a business as good as partners, as good as together mending a experiences, technologies, as good as policies.

Angus Logan (@anguslogan)
Senior Technical Product Manager
Windows Live