sso manager
DESCRIPTION
Overview of EmpowerID SSO Manager. SSO Manager enables single sign-on for corporate and cloud applicationsTRANSCRIPT
SSO Application User Dashboard
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory | www.empowerID.com 1
Service Provider Initiated SSO
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 2
Identity Provider Initiated SSO
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 3
The 5 Federated SSO Scenarios
1. Corporate Login to Cloud Application
2. Cloud Login to Internal Application
3. Corporate Login to Internal Application
4. Corporate Login to Partner Application
5. Identity as a Service (IdaaS) Hub
Copyright © 2013. empowerID is a trademark of The Dot Net Factory, LLC. | www.empowerid.com4
Corporate Login to Cloud Application
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 5
SSO Login Page
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 6
SSO Application Catalog
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 7
Cloud Login to Internal Application
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 8
SSO Login Page
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 9
Supports Custom Branding
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory | www.empowerID.com 10
Corporate Login to Internal Application
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 11
Corporate Login to Partner Application
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 12
Identity as a Service (IdaaS) Hub
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 13
Mobile HTML5 User Interface
Copyright © 2013. empowerID is a trademark of The Dot Net Factory, LLC. | www.empowerid.com14
Second Factor Login & Password Reset
Copyright © 2013. empowerID is a trademark of The Dot Net Factory, LLC. | www.empowerid.com 15
SSO Manager: Key Features
» Multi-Protocol Support: support for SAML protocol,
WS-Federation, WS-Trust, OAuth, OpenID, LDAP,
and RADIUS
» Federation Roles: Identity Provider (IdP) and Service
Provider (SP)
» Security Token Service: a Web Service (WS) Trust-
based token service, enabling policy-driven trust
brokering and secure identity propagation between
Web services.
» Identity Mapping and Attribute Retrieval: translate or
map identities in Metadirectory based on attributes in
incoming SAML assertions. Attribute retrieval for
inclusion in SAML assertions from Metadirectory and
live system accessCopyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 16
SSO Manager: Key Features
» Polyarchical RBAC
• Permissions model designed for complex organizations
and multi-tenancy
» Extranet Directory:
• Eliminates the need to provision external users in the
corporate directory
» Workflow Studio Federation Development
Environment:
• Workflow Studio templates to generate and manipulate
claims and identity information during the login processing
pipeline – for SAML, WS-Trust, and SharePoint systems
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 17
SSO Manager: Key Features
» Adaptive Authentication:
• Login Workflow – policy gate during the login process that
provides a flexible plugin point for registration and identity
proofing processes
• Authentication Level Enforcement – require different
authentication levels per Service Provider application
• Device Registration – force users to register and verify
ownership of PCs and mobile devices
» SharePoint Claims Provider:
• SSO for SharePoint
• Strong Authentication for SharePoint
• Role-Based Access Control for SharePoint
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 18
Claim Information Provider
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 19
Adaptive Authentication
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 20
Adaptive Authentication – Login Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 21
Adaptive Authentication – Login Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 22
Adaptive Authentication – Level 2 Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 23
Adaptive Authentication – Level 3 Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 24
Adaptive Authentication – Level 5 Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 25
Forgot Password Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 26
Forgot Username Workflow
Copyright © 2013. EmpowerID is a trademark of The Dot Net Factory, LLC. | www.empowerID.com 27