AssureBridge - B2B Partner Demands SSO - Marketing Presentation

Preview:

DESCRIPTION

B2B Single Sign-On implementations are notoriously complex and companies invest significant resources to deliver this important and highly critical functionality. These implementations are even more complex when a company requires that its smaller partner implements SSO using such complex standards as SAML.

Citation preview

Reliable InsuranceD d SSO

A B idA B id

Demands SSO

AssureBridgeAssureBridgeB2B Single Sign-On (SSO) Made Easy

Oleg CohenOl C h @ b id

g g ( ) y

Page 1

Oleg.Cohen@assurebridge.com

Business Problem Business Problem

What is AssureBridgeWhat is AssureBridge

Value Proposition Value Proposition

AGENDAAGENDA Demo Demo

AssureBridge Difference AssureBridge Difference

Page 2

Business Problem –B2B Partner demands SSOB2B Partner demands SSO

Users login to Users login to

Users need to be Users need to be seamlessly logged inseamlessly logged in

use the siteuse the site

seamlessly logged inseamlessly logged in

Reliable InsuranceReliable InsuranceReliable InsuranceReliable InsuranceDemands SSODemands SSO

Page 3

Customer Need Partner’sSite

Your Site

?

BUSINESS DRIVER:BUSINESS DRIVER:To meet partner’s requirement for

W b i i i h li ff iWeb integration with your online offering

CUSTOMER PAINS:CUSTOMER PAINS: Risk of losing profitable business opportunity Company lacks ability to implement SSO quickly Company lacks ability to implement SSO quickly Partner insists on complex standard compliance Staff can’t provide adequate on-going support

CUSTOMER NEED:CUSTOMER NEED:

Page 4

Rapidly implement reliable Internet SSO functionality

Customers See Internet SSO as High Risk

Client’s actual planning notes flagging timely SSO integration as

Risk++

Page 5

AssureBridge Offering – SSO Exchange

Fully-Managed Hosted Single Sign-On Service

Connects to your business Web applicationsConnects to your business Web applications

Powers seamless SSO between your web applications and your partners’

Provides professional setup configurationProvides professional setup, configuration,troubleshooting, and monitoring

by AssureBridge experts

Page 6

Value Proposition – Fastest Implementation

Our customers: Our customers:

Customer SatisfactionCustomer Satisfaction

HS

HS

Fastest Implementation

ion

ion

• Meet partner requirements in weeks vs. months in implementing robust and

TREN

GTH

TREN

GTH

Prop

ositi

Prop

ositi

Expertise

gstandards-compliant Internet Single Sign-On

OU

R S

TO

UR

ST

Valu

e P

Valu

e P

Reliable Hosting

Page 7

Value Proposition – Expertise

Our customers: Our customers:

Customer SatisfactionCustomer Satisfaction

HS

HS

Fastest Implementation

ion

ion

• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet

TREN

GTH

TREN

GTH

Prop

ositi

Prop

ositi

Expertise

Single Sign-On

No longer required to invest into hiring and

OU

R S

TO

UR

ST

Valu

e P

Valu

e P

Reliable

invest into hiring and retaining expensive and hard-to-find experts

Hosting

Page 8

Value Proposition – SupportCustomer SatisfactionCustomer Satisfaction

Our customers:Our customers:

HS

HS

Fastest Implementation

ion

ion

• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet

TREN

GTH

TREN

GTH

Prop

ositi

Prop

ositi

Expertise

Single Sign-On

No longer required to invest into hiring and retaining expensive and hard to find e perts

OU

R S

TO

UR

ST

Valu

e P

Valu

e P

Reliable Leverage fault-tolerant

infrastructure and expert

and hard-to-find experts

Hostinginfrastructure and expert support to maximize the service uptime

Page 9

Value Proposition –Lowers Barrier to Adoptionp

Customer SatisfactionCustomer Satisfaction

Our customers: Our customers:

HS

HS

Fastest Implementation

ion

ion

• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Benefit from a

TREN

GTH

TREN

GTH

Prop

ositi

Prop

ositi

Expertise

Single Sign-On

No longer required to invest into hiring and retaining expensive and hard to find e perts

Benefit from a reliable and affordable

OU

R S

TO

UR

ST

Valu

e P

Valu

e P

Reliable Leverage fault-tolerant

and hard-to-find expertsInternet SSO

solutionHosting

ginfrastructure and expert support to maximize the service uptime

Page 10

AssureBridge Positioning

For small and medium businesses who are under partner pressure p p

to rapidly implement complex Web Single Sign-On

SSO SSO Exchange Exchange is an affordablefull-service hosted solution

that delivers the most reliable standards-compliantthat delivers the most reliable standards compliant Internet SSO functionality in the least amount of time

To enable high level of customer and partner satisfactionand the growth of their business.

Page 11

g

DEMO*AssureBridge SSO Solution

Page 12

* Demo Screenshots are available in the Appendix

Secure Internet SSO is Highly ComplexSecure and reliable Internet SSO involves many

complex interactions among multiple distributed parties. AssureBridge shieldsshields you

from these complexities.

Speedy Rent‐A‐Car Domain  Reliable Insurance Domain 

Customer

Step 1a: User logs into Reliable Site Step 1b: User Clicks on Rent‐A‐Car Site Link

18

Step 8:  Browser redirect User to Speedy Rental site with secure SAML token in request

(https://www.speedyrental.com) (https://www.reliableinsurance.com)

Speedy Rentals Secure Partner Site

Reliable Insurance

Link to Rent a Car

Step 2a: Portal Sends Request to  IDP Step 2b: IDP gets

37

Custom SSO Plug‐in

9 Step 3: IDP Redirects to Browser with a

UserStore

Step 9:  Decodes the token, extracts user info and binds into Portal session context.

IDM

SAML Identity Provider (IDP)

SAML Service Provider (SP)

Step 2b: IDP gets attributes, builds SAML Assertion , signs with a Partner A’s Private Key2

4

Application Component

5

Browser  with a SAML artifact token

Step 5: SP requests SAML assertion via a SOAP service

Step 7a: SP validates SAML Assertion Cryptographic signatureStep 7b: SP  send s browser secure SAML token with encrypted user attributes

UserStore

Page 13

6Step 4: User Browser redirects artifact token to SAML SP Step 6: IDP returns SAML 

assertion via a SOAP service

Key SSO Challenges

ExpertiseExpertise True experts

TimeTime--ToTo--MarketMarket Build implement True experts

are hard to find Knowledge gaps

are risky

Build, implement, and integrate Negotiate and coordinate with

partnersare risky partners

SecuritySecurity OperationsOperationsyy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

SSO issues require complex troubleshooting

Page 14

Key SSO Challenges – Expertise

TimeTime--ToTo--MarketMarket Build implement

ExpertiseExpertise True experts Build, implement,

and integrate Negotiate and coordinate with

partners

True experts are hard to find Knowledge gaps

are risky

SecuritySecurity OperationsOperations

partnersare risky

yy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

p SSO issues require complex

troubleshooting

Page 15

AssureBridge Solution – Expertise

TimeTime--ToTo--MarketMarket Build implement

ExpertiseExpertise SSO protocol Build, implement,

and integrate Negotiate and coordinate with

partners

SSO protocolconfiguration Web application

integration partners

SecuritySecurity OperationsOperations

integration

yy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

p SSO issues require complex

troubleshooting

Page 16

Key SSO Challenges – Time-To-Market

TimeTime--ToTo--MarketMarket Build implement

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol Build, implement,

and integrate Negotiate and coordinate with

partners

SSO protocolconfiguration Web application

integration

SSO protocolconfiguration Web application

integration

SecuritySecurity OperationsOperations

partnersintegrationintegration

yy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

p SSO issues require complex

troubleshooting

Page 17

AssureBridge Solution – Time-To-Market

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol

TimeTime--ToTo--MarketMarketRapid SSO protocol

configuration Web application

integration

SSO protocolconfiguration Web application

integration

Rapidprovisioning Lightweight SSO adapters

SecuritySecurity

integrationintegration Integration test harness

OperationsOperationsyy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

p SSO issues require complex

troubleshooting

Page 18

Key SSO Challenges – Security

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol

TimeTime--ToTo--MarketMarketRapid

TimeTime--ToTo--MarketMarketRapid SSO protocol

configuration Web application

integration

SSO protocolconfiguration Web application

integration

Rapidprovisioning Lightweight SSO adapters

Rapidprovisioning Lightweight SSO adapters

integrationintegration Integration test harness Integration test harness

SecuritySecurity OperationsOperationsyy Potential legal

and audit exposure

pp SSO issues =

relationship problems

Data privacy protectionissues

p SSO issues require complex

troubleshooting

Page 19

AssureBridge Solution – Security

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol

TimeTime--ToTo--MarketMarketRapid

TimeTime--ToTo--MarketMarketRapid SSO protocol

configuration Web application

integration

SSO protocolconfiguration Web application

integration

Rapidprovisioning Lightweight SSO adapters

Rapidprovisioning Lightweight SSO adapters

OperationsOperations

integrationintegration Integration test harness Integration test harness

SecuritySecurity OperationsOperationspp SSO issues =

relationship problems

yy Leverages

industry standards

pp SSO issues =

relationship problems SSO issues require complex

troubleshooting Secure multi-tenant platform Fully auditable system

p SSO issues require complex

troubleshooting

Page 20

Key SSO Challenges – Operations

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol

TimeTime--ToTo--MarketMarketRapid

TimeTime--ToTo--MarketMarketRapid SSO protocol

configuration Web application

integration

SSO protocolconfiguration Web application

integration

Rapidprovisioning Lightweight SSO adapters

Rapidprovisioning Lightweight SSO adapters

integrationintegration Integration test harness Integration test harness

SecuritySecuritySecuritySecurity OperationsOperationsyy Leverages

industry standards

yy Leverages

industry standards

pp SSO issues =

relationship problems

Secure multi-tenant platform Fully auditable system Secure multi-tenant platform Fully auditable system

SSO issues require complex troubleshooting

Page 21

AssureBridge Solution – Operations

ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol

TimeTime--ToTo--MarketMarketRapid

TimeTime--ToTo--MarketMarketRapid SSO protocol

configuration Web application

integration

SSO protocolconfiguration Web application

integration

Rapidprovisioning Lightweight SSO adapters

Rapidprovisioning Lightweight SSO adapters

integrationintegration Integration test harness Integration test harness

SecuritySecuritySecuritySecurity OperationsOperationsyy Leverages

industry standards

yy Leverages

industry standards

pp 24x7 support Robust enterprise-

class platform Secure multi-tenant platform Fully auditable system Secure multi-tenant platform Fully auditable system

class platform Early warning system Triage

Page 22

Summary

AssureBridge rapidly delivers reliable SSO empowering you to:

Connect to your partner in record timeConnect to your partner in record time

Support complex SSO standards without adding staffpp p g

Provide your end-users with reliable solution

Avoid an expensive product purchase and installation

Page 23

Q&A

What are your questions?

Page 24

F dditi l i f tiFor additional information, including a personalized demo

please contactplease contact

Oleg CohenOleg CohenAssureBridge, Inc.

Oleg.Cohen@assurebridge.comg @ g617-455-7927

Visit our Web Site at:http://www.assurebridge.com

Page 25

APPENDIX

Page 26

How do we solve the problem?Without AssureBridge

Partner A Partner B

Web Site A Web Site B

C i l H G

Integration ($$) Integration ($)

Commercial SSO Product

($$$)

Home-Grown SSO Product

($$)

SSO Infrastructure + Operations ($$)

SSO Infrastructure + Operations ($)

Page 27

How do we solve the problemUsing AssureBridge Services

Partner A Partner B

Web Site A Web Site B

Integration ($) Integration ($)

SSO Exchange:SSO Exchange: ($)gg Hosted AssureBridge SSO Services Robust & Reliable InfrastructureW ld Cl O ti

( )

Page 28

World-Class Operations

DEMOAssureBridge SSO Solution for Speedy Rental

Page 29

Business Case• Speedy Rental is a small regional provider• Reliable Insurance is a large national company

S d h t it t d it b i• Speedy has an opportunity to expand its business by partnering with Reliable Insurance

• Reliable has implemented an expensive commercial• Reliable has implemented an expensive commercial Internet SSO platform

• Reliable requires all its partners to support seamlessReliable requires all its partners to support seamless SAML-based logon for its customers

• Speedy lacks ability to develop and maintain its own SSO solution and is under pressure to deliver

• Speedy chooses AssureBridge to help it quickly and li bl t ith th d di t

Page 30

reliably connect with the demanding partner

BEFORE SINGLE SIGN-ONDemo

Page 31

No SSO Experience – Login Page

Log into Your Site

Page 32

No SSO Experience – Partner Link

Click on External Link

Page 33

No SSO Experience – Need to Log In Again

Prompted to Log In Again

(Another User ID and Password)

Page 34

No SSO Experience – Partner Site

Click on Logout Link

Page 35

No SSO Experience – Logout

Logged Out from Partner

Page 36

No SSO Experience – Still signed in

Remained signed in with

Reliable

Page 37

SINGLE SIGN-ON EXPERIENCEDemo

Page 38

Desired SSO Experience – Login Page

Log into Your Site

Page 39

Desired SSO Experience – Partner Link

Click on Partner Link

Page 40

Desired SSO Experience – Partner Site

Seamlessly taken to

Partner SiteClick on

Logout Link

User ID and Profile Information TransferredTransferred

Between Sites

Page 41

Desired SSO Experience – Logout

Logged OutLogged Out from Partner

Page 42

Desired SSO Experience – Logged Out from All

Signed out from both

sites

Page 43

Recommended