Upload
oleg-cohen
View
1.287
Download
2
Embed Size (px)
DESCRIPTION
B2B Single Sign-On implementations are notoriously complex and companies invest significant resources to deliver this important and highly critical functionality. These implementations are even more complex when a company requires that its smaller partner implements SSO using such complex standards as SAML.
Citation preview
Page 1
Oleg Cohen
AssureBridgeB2B Single Sign-On (SSO) Made Easy
Reliable InsuranceDemands SSO
Page 2
AGENDA
Business Problem
What is AssureBridge
Value Proposition
Demo
AssureBridge Difference
Page 3
RELIABLE INSURANCE
Reliable InsuranceDemands SSO
Business Problem – B2B Partner demands SSO
Users need to be seamlessly logged in
Users login to use the site
Page 4
Customer Need
BUSINESS DRIVER:
To meet partner’s requirement for Web integration with your online offering
CUSTOMER PAINS:
Risk of losing profitable business opportunity Company lacks ability to implement SSO quickly Partner insists on complex standard compliance Staff can’t provide adequate on-going support
CUSTOMER NEED:Rapidly implement reliable Internet SSO functionality
Partner’sSite
Your Site
?
Page 5
Customers See Internet SSO as High Risk
Client’s actual planning notes flagging timely
SSO integration as Risk++
Client’s actual planning notes flagging timely
SSO integration as Risk++
Page 6
AssureBridge Offering – SSO Exchange
Fully-Managed Hosted Single Sign-On ServiceFully-Managed Hosted Single Sign-On Service
Connects to your business Web applications
Powers seamless SSO between your web applications and your partners’
Provides professional setup, configuration,troubleshooting, and monitoring
by AssureBridge experts
Page 7
Our customers:
Value Proposition – Fastest ImplementationO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Single Sign-On
Page 8
Our customers:
Value Proposition – ExpertiseO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Single Sign-On
No longer required to invest into hiring and retaining expensive and hard-to-find experts
Page 9
Value Proposition – SupportO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
Our customers:
Leverage fault-tolerant infrastructure and expert support to maximize the service uptime
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Single Sign-On
No longer required to invest into hiring and retaining expensive and hard-to-find experts
Page 10
Value Proposition – Lowers Barrier to Adoption
OU
R S
TR
EN
GT
HS
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
Our customers:
Leverage fault-tolerant infrastructure and expert support to maximize the service uptime
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Single Sign-On
No longer required to invest into hiring and retaining expensive and hard-to-find experts
Benefit from a reliable and affordable
Internet SSO solution
Page 11
AssureBridge Positioning
For small and medium businesses who are under partner pressure
to rapidly implement complex Web Single Sign-On
For small and medium businesses who are under partner pressure
to rapidly implement complex Web Single Sign-On
SSO Exchange is an affordable full-service hosted solution
that delivers the most reliable standards-compliant Internet SSO functionality in the least amount of time
SSO Exchange is an affordable full-service hosted solution
that delivers the most reliable standards-compliant Internet SSO functionality in the least amount of time
To enable high level of customer and partner satisfaction and the growth of their business
To enable high level of customer and partner satisfaction and the growth of their business
Page 12
DEMO*AssureBridge SSO Solution
* Demo Screenshots are available in the Appendix
Page 13
Secure Internet SSO is Highly Complex
Speedy Rent-A-Car Domain (https://www.speedyrental.com)
Reliable Insurance Domain (https://www.reliableinsurance.com)
IDM
Speedy Rentals Secure Partner Site
SAML Identity Provider (IDP)
Reliable Insurance
SAML Service Provider (SP)
Customer
Link to Rent a Car
Step 1a: User logs into Reliable Site Step 1b: User Clicks on Rent-A-Car Site Link
Step 2a: Portal Sends Request to IDP Step 2b: IDP gets attributes, builds SAML Assertion , signs with a Partner A’s Private Key
1
2
3
4
7
8
Custom SSO Plug-in
Application Component
9
5
6
Step 3: IDP Redirects to Browser with a SAML artifact token
Step 4: User Browser redirects artifact token to SAML SP
Step 5: SP requests SAML assertion via a SOAP service
Step 6: IDP returns SAML assertion via a SOAP service
Step 7a: SP validates SAML Assertion Cryptographic signatureStep 7b: SP send s browser secure SAML token with encrypted user attributes
UserStore
UserStore
Step 8: Browser redirect User to Speedy Rental site with secure SAML token in request
Step 9: Decodes the token, extracts user info and binds into Portal session context.
Internet SSO in
volves
many complex
interactions among
multiple partie
s
Secure and reliable Internet SSO involves many complex interactions among multiple
distributed parties. AssureBridge shields you from these complexities.
Secure and reliable Internet SSO involves many complex interactions among multiple
distributed parties. AssureBridge shields you from these complexities.
Page 14
Key SSO Challenges
Expertise True experts
are hard to find Knowledge gaps
are risky
Expertise True experts
are hard to find Knowledge gaps
are risky
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Page 15
Key SSO Challenges – Expertise
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Expertise True experts
are hard to find Knowledge gaps
are risky
Expertise True experts
are hard to find Knowledge gaps
are risky
Page 16
AssureBridge Solution – Expertise
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Page 17
Key SSO Challenges – Time-To-Market
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
partners
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Page 18
AssureBridge Solution – Time-To-Market
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Page 19
Key SSO Challenges – Security
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Page 20
AssureBridge Solution – Security
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Page 21
Key SSO Challenges – Operations
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Page 22
AssureBridge Solution – Operations
Expertise SSO protocol
configuration Web application
integration
Expertise SSO protocol
configuration Web application
integration
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Time-To-Market Rapid
provisioning Lightweight SSO adapters Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations 24x7 support Robust enterprise-
class platform Early warning system Triage
Operations 24x7 support Robust enterprise-
class platform Early warning system Triage
Page 23
Summary
AssureBridge rapidly delivers reliable SSO empowering you to:AssureBridge rapidly delivers reliable SSO empowering you to:
Connect to your partner in record time
Support complex SSO standards without adding staff
Provide your end-users with reliable solution
Avoid an expensive product purchase and installation
Page 24
Q&A
What are your questions?
Page 25
For additional information, including a personalized demo
please contact
Oleg CohenAssureBridge, Inc.
617-455-7927
Visit our Web Site at:
http://www.assurebridge.com
Page 26
APPENDIX
Page 27
How we solve the problemWithout AssureBridge
Partner APartner A Partner BPartner B
Web Site A
Commercial SSO Product ($$
$)
Web Site B
Home-Grown SSO Product ($
$)
Integration ($$) Integration ($)
SSO Infrastructure + Operations ($$)
SSO Infrastructure + Operations ($)
Page 28
How we solve the problemUsing AssureBridge Services
Partner APartner A Partner BPartner B
Web Site A
SSO Exchange: Hosted AssureBridge SSO Services Robust & Reliable Infrastructure World-Class Operations
Web Site B
Integration ($) Integration ($)
($)
Page 29
DEMOAssureBridge SSO Solution for Speedy Rental
Page 30
Business Case• Speedy Rental is a small regional provider• Reliable Insurance is a large national company• Speedy has an opportunity to expand its business
by partnering with Reliable Insurance• Reliable has implemented an expensive commercial
Internet SSO platform• Reliable requires all its partners to support seamless
SAML-based logon for its customers• Speedy lacks ability to develop and maintain its own
SSO solution and is under pressure to deliver• Speedy chooses AssureBridge to help it quickly and
reliably connect with the demanding partner
Page 31
BEFORE SINGLE SIGN-ONDemo
Page 32
No SSO Experience – Login Page
Log into Your Site
Page 33
No SSO Experience – Partner Link
Click on External Link
Page 34
No SSO Experience – Need to Log In Again
Prompted to Log In Again
(Another User ID and Password)
Page 35
No SSO Experience – Partner Site
Click on Logout Link
Page 36
No SSO Experience – Logout
Logged Out from Partner
Page 37
No SSO Experience – Still signed in
Remained signed in with
Reliable
Page 38
SINGLE SIGN-ON EXPERIENCEDemo
Page 39
Desired SSO Experience – Login Page
Log into Your Site
Page 40
Desired SSO Experience – Partner Link
Click on Partner Link
Page 41
Desired SSO Experience – Partner Site
Seamlessly taken to
Partner Site
User ID and Profile Information Transferred
Between Sites
Click on Logout Link
Page 42
Desired SSO Experience – Logout
Logged Out from Partner
Page 43
Desired SSO Experience – Logged Out from All
Signed out from both
sites