Single Sign-On is a technology to allow a single authentication to be used across multiple independent systems.

learn more… | top users | synonyms

0
votes
0answers
43 views

Understanding SSO flows

I m actually studying SSO using OAuth2 and I m having some questions working with real architecture. I understand the way how we connect to a tier server, getting an access token and making requests ...
1
vote
0answers
49 views

How to detect previous version cookies, and remove them?

We occasionally deploy our SSO system with some major changes. As much as we try to minimize it, on occasion we have require our users to delete all their "old" cookies. This is because their cookies ...
5
votes
1answer
36 views

OAuthv2 authorization grants

I just read this excellent tutorial on OAuthv2 but am still missing some important concepts regarding authorization grants. I'm fundamentally not understanding the necessity for the two ...
3
votes
1answer
175 views

How can I build a seamless login for multiple sites using OAuth2?

The question is admittedly a bit leading, but what I mean to ask is: If a user logs into into site X, is there a way to automatically log into site Y? Site Y utilises single sign-on via OAuth2 ...
1
vote
0answers
40 views

oAuth Flow Question in a SSO scenario

I have the following simple scenario: Multiple web applications share SSO functionality An Authorization Server is used as the central identity service for the web applications Users are ...
1
vote
0answers
77 views

Implement SSO login with or without Membership

I need to implement SSO for four different domains, say abc.com pqr.com sql.com xyz.com Now, I have already login system for two of my applications using Membership. But now requirement is ...
4
votes
1answer
333 views

How can I integrate local web development environments with a central SSO solution?

We have a single-page web application, and we have a new SSO site (also our own) using OAuth2, and are looking to hook them up. On our production/staging/CI deployments, it's easy to hook everything ...
0
votes
2answers
437 views

Single sign on if you do not have control of one or more of the client/web apps?

I have a customer who has a client app and when they log in to their client app, they will see a link to my website. When they click on the link, it should log in them in automatically to the website ...
3
votes
3answers
1k views

Securing credentials passed to web service

I'm attempting to design a single sign on system for use in a distributed architecture. Specifically, I must provide a way for a client website (that is, a website on a different ...
2
votes
2answers
795 views

Moving between sites using SAML

I'm tasked with developing an SSO system, and was guided towards using the SAML spec. After some research I think understand the interaction between a Service Provider and an ID Provider and how a ...
4
votes
1answer
474 views

SSO between multiple Flex applications [closed]

We have three applications developed in Flex and all these use BlazeDS. These applications have their own authentication implementations (Database). Also they will be deployed in tomcat. Deploying all ...
2
votes
3answers
169 views

A single access point for several applications

I've been asked to create a web page from which users can access several other applications created using oracle forms and jsf, this will include also sso. I cant think of an easy way to do it, what ...
0
votes
2answers
169 views

For ASP.NET Programmers: Does the executable 'dcpromo' have any significance?

Dcpromo.exe is famous among MCSEs for being they only way to create a Windows Domain Controller (in other words an Active Directory Domain) ... which in turn is often used by the ASP.NET Membership ...
2
votes
3answers
2k views

What product is better: ADFSv2, Ping Identity, CS Siteminder? [closed]

I'm comparing different STS's for claims based authentication and am trying when it's appropriate to use each one. It appears that ADFSv2 should be used in all Windows Environments. Ping and ...