An introduction to the principles of SSO and a comparison between 2 implementations: SAML and Open Id

1. SSO
with
Window Identity Foundation

2. What is SSO ?
- SSO : Single Sign-On
- Log in once and access to all systems without to log in
again at each of them

3. Benefits
- Reducing password fatigue from different user
name and password combinations
- Reducing time spent re-entering passwords for
the same identity
- Reducing IT costs due to lower number of IT
help desk calls about passwords

4. - the negative impact in case the credentials are
available to other persons and misused ("keys
to the castle")
Criticisms

5. Principle & vocabulary
- Security Token
- Claims & Claims-based applications
- STS : Security Token Service
- RP : Relying Party
- IdP : Identity Provider

9. * alcohol can damage your health

10. Standards
- OpenID
- Facebook, Microsoft, Google, PayPal, Ping
Identity, Symantec, and Yahoo
- SAML & WS-Federation
- Microsoft - ADFS V2
- Azure AppFabric Access Control
- Windows Identity Foundation
- Oauth
- Liberty Alliance
- Windows CardSpace (U-Prove)
- MicroID
- Windows CardSpace
- Higgins

11. OpenID SAML
Dates from 2005 2001
Current version OpenID 2.0 SAML 2.0
Main purpose Single sign-on for consumers Single sign-on for enterprise users
Protocols used XRDS, HTTP SAML, XML, HTTP, SOAP
.Net libraries DotNetOpenAuth
System.IdentityModel
Windows Identity Foundation
OpenID vs SAML

12. SAML

13. OpenID

14. Windows Identity Foundation
- WSFederationAuthenticationModule
- Handle redirection to STS
- Process the sign-in response
- Create the ClaimsPrincipal
- SessionAuthenticationModule
- Manage the authenticated session
- Write cookies

15. Windows Identity Foundation

16. https://betclicstage.com/r1/back/st1/back/Common/home.aspx
Betclic ADFS

17. Test localy with Thinktecture.IdentityModel.EmbeddedSts
- Use WS-Federation STS for ASP.NET with minimal configuration (replace
deprecated "Identity and Access Control" Visual Studio extension)
http://www.nuget.org/packages/Thinktecture.IdentityModel.EmbeddedSts/

18. Create a claims-based application on Visual Studio 2013
https://adfs-bead.betclicstage.net/federationmetadata/2007-06/federationmetadata.xml

19. Identity Developer Training Kit
http://www.microsoft.com/en-us/download/confirmation.aspx?id=14347
Passive Authentication for ASP.NET with WIF
https://msdn.microsoft.com/en-us/magazine/ff872350.aspx
Federated Identities: OpenID vs SAML vs OAuth
http://www.softwaresecured.com/2013/07/16/federated-identities-openid-vs-saml-vs-oauth/

20. Find out more
• On https://techblog.betclicgroup.com/

21. About Us
• Betclic Everest Group, one of the world leaders in online
gaming, has a unique portfolio comprising various
complementary international brands: Betclic, Everest
Poker/Casino, Bet-at-home, Expekt, Imperial Casino, Monte-
Carlo Casino…
• Through our brands, Betclic Everest Group places expertise,
technological know-how and security at the heart of our
strategy to deliver an on-line gaming offer attuned to the
passion of our players. We want our brands to be easy to use
for every gamer around the world. We’re building our
company to make that happen.
• Active in 100 countries with more than 12 million customers
worldwide, the Group is committed to promoting secure and
responsible gaming and is a member of several international
professional associations including the EGBA (European
Gaming and Betting Association) and the ESSA (European
Sports Security Association).

22. We want our Sports betting, Poker, Horse racing and
Casino & Games brands to be easy to use for every
gamer around the world. Code with us to make that
happen.
Look at all the challenges we offer HERE
Check our Employer Page
Follow us on LinkedIn
WE’RE HIRING !