The Windows Azure Access Control Service (ACS) enables federated authentication, but all the examples I've seen has been of passive federation (browser-based applications authenticating via a sequence of HTTP redirects and scripted HTTP posts).
Does the ACS support active federation?
In other words: assume that we have a rich client like a WPF or Silverlight application that accesses a web service. Is it possible to use the ACS as an STS in this scenario?