This document provides an overview of single sign-on (SSO) and discusses some common open standards used for SSO, including OpenID, SAML, Kerberos, WS-Trust, and WS-Federation. It outlines some of the key problems with traditional authentication methods, how SSO solves these problems, and the need for open standards. The next webinar will provide more details on specific SSO technologies and demonstrate their use with the WSO2 Identity Server to solve identity and access management challenges.

1. A Walk Through SSO
Suresh Attanayake
Software Engineer

2. About WSO2
• Providing the only complete open source componentized cloud
platform
– Dedicated to removing all the stumbling blocks to enterprise agility
– Enabling you to focus on business logic and business value
• Recognized by leading analyst firms as visionaries and leaders
– Gartner cites WSO2 as visionaries in all 3 categories of applica-
tion infrastructure
– Forrester places WSO2 in top 2 for API Management
• Global corporation with offices in USA, UK & Sri Lanka
– 200+ employees and growing
• Business model of selling comprehensive support & mainte-
nance for our products

3. What we cover today
● Problems with traditional authentication
● How SSO solves those problems
● Need for Open Standards
● Introduction to some open standards and how they
solve the common authentication problems

4. Next Webinar - SSO with the WSO2
Identity Server
● Some SSO technologies in detail
– OpenID
– SAML
– Kerberos
– WS-Trust
– WS-Federation
● Demos with the WSO2 Identity Server
● Solving identity problems

5. Story begins

6. World Wide Web
● News
● Multimedia
● Information (wiki, blogs)
● Forums
● Email
● Social Networking
● E-commerce
● Online Banking

7. Authentication is required
● Protect resources
● Authorization
● Identification

8. Something you know

9. Multiple Web Applications

10. Multiple Web Applications
Netcraft Survey

11. Multiple User Stores

12. Problem #1 – Too many credentials

13. Problem #2 – There is already a Bob

14. Problem #3 – Using the same
credential

15. Shared User Store

16. Problem #4 – Multiple Logins

17. Shared User Store is not always an
option

18. Shared User Store is not always an
option
● World Wide Web

19. Central Authentication Service (CAS)

20. Problem #1 – Too many credentials

21. Problem #2 – There is already a Bob

22. Solution - One Username & one
Password

23. Problem #3 – Using the same
credential

24. Solution - Login only at the CAS/IP

25. Problem #4 – Multiple Logins

26. Solution - Login once at the CAS/IP

27. Whats more ?
● User convenience
● Less IT Help Desk calls
● More secure

28. Open Standards

29. Why Open Standards ?
● More secure solutions
● You are not your own
● Be alerted an up-to-date
– http://oauth.net/advisories/2009-1/
● Freely available libraries and plugging
● Interoperability
● Extensibility

30. OpenID

31. OpenID Providers

32. OpenID Identifiers
● Google
– https://profiles.google.com/YourGoogleID
● Blogger
– http://blogname.blogspot.com/
● MySpace
– http://www.myspace.com/username

33. Relying Parties

34. Relying Parties
● Over 50,000 web sites
– http://wiki.openid.net/w/page/25453698/Gallery
● One billion user accounts
● Drupal, Wordpress and libraries
● Visit http://openid.net/

35. SAML
(Security Assertions Markup Language)

36. SAML Web Browser SSO Profile

37. Kerberos

38. WS- Trust

39. WS- Federation

40. Identity Delegation

41. OpenID Connect

42. Questions?

43. 150+ globally positioned support customers

44. Thank you