The SSO domain specifies how SSO will be used for the resources included in the domain. In Digital Access, SSO domains are configured to enable Single sign-on for resources using the same user credentials. Session-based SSO - Enables one-time-logon: users do not have to re-authenticate for each request.Persistent SSO - Access to several resources without the need to re-authenticate for each resource.If the back-end server requires the logon request to contain specific headers, these can be supplied as additional headers. The variables, , and are replaced by the stored user name, password and NTLM domain from the SSO database. The form data usually contains a user name and a password together with some static fields. GET requests include all required data in the URL.POST requests supply additional data from the client (browser) to the server in the message body.When SSO is enabled and used, it performs a POST or a GET request to a URL: SSO can also be used for well defined protocols as Microsoft Terminal server (RDP), Secure Shell (SSH) and Telnet.
Almost any web resource requiring additional user information can benefit and use SSO. The system administrators can enabled SSO for web based access including HTML5 clients and some TCP protocols using the Access Client in Digital Access. If credentials are invalid or changed, the user will be prompted to enter them again. If the user has been prompted to add individual SSO credentials, they are then stored per user account and retrieved whenever the user accesses resources registered in an SSO domain. But the system administrators have the possibility to pre-populate this and even make a dynamic lookup to get the values. When using the system for the first time, users might be prompted for internal credentials as additional user ID and password. Policy expressions help and assist the user with internal credentials. Single Sign-On (SSO) permits users to enter their credentials once, which then gives them access to several resources without the need to re-authenticate later on. This article describes Single Sign-On and how it is used in Smart ID Digital Access component.
0 kommentar(er)
