Scribd Logo
Upload

Welcome to Scribd!

  • 136 views

    Sso

    Uploaded by

    Vc Raju
    Single sign-on (SSO) allows users to authenticate once to access multiple applications and systems. It reduces operational costs and improves the user experience by eliminating the need for separate credentials and sign-ins. SSO can be implemented through password synchronization, web access management, or federated SSO across organizations. While SSO enhances security and compliance, risks still exist if an unauthorized user gains access to an unattended desktop.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd

    Sso

    Uploaded by

    Vc Raju
    136 views24 pages
    Single sign-on (SSO) allows users to authenticate once to access multiple applications and systems. It reduces operational costs and improves the user experience by eliminating the need for separate credentials and sign-ins. SSO can be implemented through password synchronization, web access management, or federated SSO across organizations. While SSO enhances security and compliance, risks still exist if an unauthorized user gains access to an unattended desktop.

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Single sign-on (SSO) allows users to authenticate once to access multiple applications and systems. It reduces operational costs and improves the user experience by eliminating the need for separate credentials and sign-ins. SSO can be implemented through password synchronization, web access management, or federated SSO across organizations. While SSO enhances security and compliance, risks still exist if an unauthorized user gains access to an unattended desktop.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    136 views24 pages

    Sso

    Uploaded by

    Vc Raju
    Single sign-on (SSO) allows users to authenticate once to access multiple applications and systems. It reduces operational costs and improves the user experience by eliminating the need for separate credentials and sign-ins. SSO can be implemented through password synchronization, web access management, or federated SSO across organizations. While SSO enhances security and compliance, risks still exist if an unauthorized user gains access to an unattended desktop.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    You are on page 1of 24

    Single Sign-On

    Why do we need SSO ?


    Current Situation: Network users interact with multiple service providers.

    Why do we need SSO ?


    Current Situation: Network users interact with multiple service providers.

    What is SSO ?

    A mechanism that allows users to authenticate themselves to multiple service providers, using only one identity.

    Agenda
    What is Single Sign-On (SSO) Advantages of SSO Types of SSO Examples Case Study Summary

    SSO How ?
    Establish trust relationships, common security infrastructure (e.g. PKI), sign contractual agreements

    What is SSO
    Single sign-on is a user/session authentication process that permits a user to enter one name and password in order to access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a particular session.

    Advantages
    Reduced operational cost Reduced time to access data, e.g. ER Improved user experience, no password lists to carry Advanced security to systems
    Strong authentication
    One Time Password devices Smartcards

    Ease burden on developers Centralized management of users, roles Fine grained auditing Effective compliance (SOX, HIPPA)

    Identity Management
    Encompasses
    directory services authentication and authorization services certificate authorities administration consoles single sign-on provisioning services.

    Types of SSO
    Password Synchronization Legacy SSO (Employee/Enterprise SSO) Web Access Management (WAM) Cross Domain (realm) SSO Federated SSO

    Password Synchronization
    A process that coordinates passwords across multiple computers and devices and/or applications Each computer, device, application still authenticates but behind the scene Products:
    MTechs P-Synch SecurePass SAM Pass Synch

    Basic Web SSO (WAM)


    Browser based application Cookie support is required Single sign-on to applications deployed on a single web server (domain)

    Novell SecureLogin
    True SSO for
    Web applications Windows host (Windows Application Server) Legacy (Client Server) applications

    Mutiple identities and password policies stored in eDir in encrypted form Novell client is installed on each workstation, User can access apps from any workstation Optionally cache credentials on workstation Transparent pw expirations and resets

    Novell SecureLogin

    Sun Java Access Manager

    Oblix (Oracle)

    Federated SSO
    Extend SSO across enterprises Liberty Alliance, OASIS, IBM/Microsoft Advantages
    Establishment of trusted partnerships New revenue opportunities New, efficient, and production biz models

    Why is this hard to implement?


    SAML (OASIS) Liberty Alliance builds fed ident on top of SAML

    Liberty Model for federated SSO

    ACEGI Security
    Open Source ACEGI Enterprise solution Authentication, Authorization Instance-based access control, Channel security Human user detection capabilities Seamless integration with Spring Framework SSO via Central Authentication Service (CAS)

    Microsoft
    Windows Server 2003 R2 adds
    Active Directory Federation Service Web Services based SSO Use Active Directory in non-Windows env

    Microsoft Identity Integration Server 2003


    SSO and account management features agents" that handle protocol translation between Active Directory ADFS provides federated SSO based on WS-*

    Case Study
    -Federal Aviation Administration -Requirements:
    -Provide SSO to ~500,000 users -Across 5000 airports world-wide - >100 web and client server applications -Multiple Directories, Departments -Web services authentication

    Summary
    Reduces cost Enhances security Supports compliance
    Financial Service (FFIEC directive) Healthcare (HIPPA)

    But.there are risks.


    Malicious user gets hold of unattended desktop Malicious processes/services sign on as you to services that they are not supposed to.

    References
    Sun Java System Access Manager eTrust Secure Sign-On Oracle IDM IBM Tivoli Access Manager Novell SecureLogin Citrix Password Manager Liberty Alliance Yale CAS (Central Authentication Service)
    Integrates well with Spring based Acegi

    Q&A

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy