Upload
oleg-cohen
View
83
Download
3
Embed Size (px)
DESCRIPTION
B2B Single Sign-On implementations are notoriously complex and companies invest significant resources to deliver this important and highly critical functionality. These implementations are even more complex when a company requires that its smaller partner implements SSO using such complex standards as SAML.
Citation preview
Reliable InsuranceD d SSO
A B idA B id
Demands SSO
AssureBridgeAssureBridgeB2B Single Sign-On (SSO) Made Easy
Oleg CohenOl C h @ b id
g g ( ) y
Page 1
Business Problem Business Problem
What is AssureBridgeWhat is AssureBridge
Value Proposition Value Proposition
AGENDAAGENDA Demo Demo
AssureBridge Difference AssureBridge Difference
Page 2
Business Problem –B2B Partner demands SSOB2B Partner demands SSO
Users login to Users login to
Users need to be Users need to be seamlessly logged inseamlessly logged in
use the siteuse the site
seamlessly logged inseamlessly logged in
Reliable InsuranceReliable InsuranceReliable InsuranceReliable InsuranceDemands SSODemands SSO
Page 3
Customer Need Partner’sSite
Your Site
?
BUSINESS DRIVER:BUSINESS DRIVER:To meet partner’s requirement for
W b i i i h li ff iWeb integration with your online offering
CUSTOMER PAINS:CUSTOMER PAINS: Risk of losing profitable business opportunity Company lacks ability to implement SSO quickly Company lacks ability to implement SSO quickly Partner insists on complex standard compliance Staff can’t provide adequate on-going support
CUSTOMER NEED:CUSTOMER NEED:
Page 4
Rapidly implement reliable Internet SSO functionality
Customers See Internet SSO as High Risk
Client’s actual planning notes flagging timely SSO integration as
Risk++
Page 5
AssureBridge Offering – SSO Exchange
Fully-Managed Hosted Single Sign-On Service
Connects to your business Web applicationsConnects to your business Web applications
Powers seamless SSO between your web applications and your partners’
Provides professional setup configurationProvides professional setup, configuration,troubleshooting, and monitoring
by AssureBridge experts
Page 6
Value Proposition – Fastest Implementation
Our customers: Our customers:
Customer SatisfactionCustomer Satisfaction
HS
HS
Fastest Implementation
ion
ion
• Meet partner requirements in weeks vs. months in implementing robust and
TREN
GTH
TREN
GTH
Prop
ositi
Prop
ositi
Expertise
gstandards-compliant Internet Single Sign-On
OU
R S
TO
UR
ST
Valu
e P
Valu
e P
Reliable Hosting
Page 7
Value Proposition – Expertise
Our customers: Our customers:
Customer SatisfactionCustomer Satisfaction
HS
HS
Fastest Implementation
ion
ion
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet
TREN
GTH
TREN
GTH
Prop
ositi
Prop
ositi
Expertise
Single Sign-On
No longer required to invest into hiring and
OU
R S
TO
UR
ST
Valu
e P
Valu
e P
Reliable
invest into hiring and retaining expensive and hard-to-find experts
Hosting
Page 8
Value Proposition – SupportCustomer SatisfactionCustomer Satisfaction
Our customers:Our customers:
HS
HS
Fastest Implementation
ion
ion
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet
TREN
GTH
TREN
GTH
Prop
ositi
Prop
ositi
Expertise
Single Sign-On
No longer required to invest into hiring and retaining expensive and hard to find e perts
OU
R S
TO
UR
ST
Valu
e P
Valu
e P
Reliable Leverage fault-tolerant
infrastructure and expert
and hard-to-find experts
Hostinginfrastructure and expert support to maximize the service uptime
Page 9
Value Proposition –Lowers Barrier to Adoptionp
Customer SatisfactionCustomer Satisfaction
Our customers: Our customers:
HS
HS
Fastest Implementation
ion
ion
• Meet partner requirements in weeks vs. months in implementing robust and standards-compliant Internet Benefit from a
TREN
GTH
TREN
GTH
Prop
ositi
Prop
ositi
Expertise
Single Sign-On
No longer required to invest into hiring and retaining expensive and hard to find e perts
Benefit from a reliable and affordable
OU
R S
TO
UR
ST
Valu
e P
Valu
e P
Reliable Leverage fault-tolerant
and hard-to-find expertsInternet SSO
solutionHosting
ginfrastructure and expert support to maximize the service uptime
Page 10
AssureBridge Positioning
For small and medium businesses who are under partner pressure p p
to rapidly implement complex Web Single Sign-On
SSO SSO Exchange Exchange is an affordablefull-service hosted solution
that delivers the most reliable standards-compliantthat delivers the most reliable standards compliant Internet SSO functionality in the least amount of time
To enable high level of customer and partner satisfactionand the growth of their business.
Page 11
g
DEMO*AssureBridge SSO Solution
Page 12
* Demo Screenshots are available in the Appendix
Secure Internet SSO is Highly ComplexSecure and reliable Internet SSO involves many
complex interactions among multiple distributed parties. AssureBridge shieldsshields you
from these complexities.
Speedy Rent‐A‐Car Domain Reliable Insurance Domain
Customer
Step 1a: User logs into Reliable Site Step 1b: User Clicks on Rent‐A‐Car Site Link
18
Step 8: Browser redirect User to Speedy Rental site with secure SAML token in request
(https://www.speedyrental.com) (https://www.reliableinsurance.com)
Speedy Rentals Secure Partner Site
Reliable Insurance
Link to Rent a Car
Step 2a: Portal Sends Request to IDP Step 2b: IDP gets
37
Custom SSO Plug‐in
9 Step 3: IDP Redirects to Browser with a
UserStore
Step 9: Decodes the token, extracts user info and binds into Portal session context.
IDM
SAML Identity Provider (IDP)
SAML Service Provider (SP)
Step 2b: IDP gets attributes, builds SAML Assertion , signs with a Partner A’s Private Key2
4
Application Component
5
Browser with a SAML artifact token
Step 5: SP requests SAML assertion via a SOAP service
Step 7a: SP validates SAML Assertion Cryptographic signatureStep 7b: SP send s browser secure SAML token with encrypted user attributes
UserStore
Page 13
6Step 4: User Browser redirects artifact token to SAML SP Step 6: IDP returns SAML
assertion via a SOAP service
Key SSO Challenges
ExpertiseExpertise True experts
TimeTime--ToTo--MarketMarket Build implement True experts
are hard to find Knowledge gaps
are risky
Build, implement, and integrate Negotiate and coordinate with
partnersare risky partners
SecuritySecurity OperationsOperationsyy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
SSO issues require complex troubleshooting
Page 14
Key SSO Challenges – Expertise
TimeTime--ToTo--MarketMarket Build implement
ExpertiseExpertise True experts Build, implement,
and integrate Negotiate and coordinate with
partners
True experts are hard to find Knowledge gaps
are risky
SecuritySecurity OperationsOperations
partnersare risky
yy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
p SSO issues require complex
troubleshooting
Page 15
AssureBridge Solution – Expertise
TimeTime--ToTo--MarketMarket Build implement
ExpertiseExpertise SSO protocol Build, implement,
and integrate Negotiate and coordinate with
partners
SSO protocolconfiguration Web application
integration partners
SecuritySecurity OperationsOperations
integration
yy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
p SSO issues require complex
troubleshooting
Page 16
Key SSO Challenges – Time-To-Market
TimeTime--ToTo--MarketMarket Build implement
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol Build, implement,
and integrate Negotiate and coordinate with
partners
SSO protocolconfiguration Web application
integration
SSO protocolconfiguration Web application
integration
SecuritySecurity OperationsOperations
partnersintegrationintegration
yy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
p SSO issues require complex
troubleshooting
Page 17
AssureBridge Solution – Time-To-Market
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol
TimeTime--ToTo--MarketMarketRapid SSO protocol
configuration Web application
integration
SSO protocolconfiguration Web application
integration
Rapidprovisioning Lightweight SSO adapters
SecuritySecurity
integrationintegration Integration test harness
OperationsOperationsyy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
p SSO issues require complex
troubleshooting
Page 18
Key SSO Challenges – Security
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol
TimeTime--ToTo--MarketMarketRapid
TimeTime--ToTo--MarketMarketRapid SSO protocol
configuration Web application
integration
SSO protocolconfiguration Web application
integration
Rapidprovisioning Lightweight SSO adapters
Rapidprovisioning Lightweight SSO adapters
integrationintegration Integration test harness Integration test harness
SecuritySecurity OperationsOperationsyy Potential legal
and audit exposure
pp SSO issues =
relationship problems
Data privacy protectionissues
p SSO issues require complex
troubleshooting
Page 19
AssureBridge Solution – Security
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol
TimeTime--ToTo--MarketMarketRapid
TimeTime--ToTo--MarketMarketRapid SSO protocol
configuration Web application
integration
SSO protocolconfiguration Web application
integration
Rapidprovisioning Lightweight SSO adapters
Rapidprovisioning Lightweight SSO adapters
OperationsOperations
integrationintegration Integration test harness Integration test harness
SecuritySecurity OperationsOperationspp SSO issues =
relationship problems
yy Leverages
industry standards
pp SSO issues =
relationship problems SSO issues require complex
troubleshooting Secure multi-tenant platform Fully auditable system
p SSO issues require complex
troubleshooting
Page 20
Key SSO Challenges – Operations
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol
TimeTime--ToTo--MarketMarketRapid
TimeTime--ToTo--MarketMarketRapid SSO protocol
configuration Web application
integration
SSO protocolconfiguration Web application
integration
Rapidprovisioning Lightweight SSO adapters
Rapidprovisioning Lightweight SSO adapters
integrationintegration Integration test harness Integration test harness
SecuritySecuritySecuritySecurity OperationsOperationsyy Leverages
industry standards
yy Leverages
industry standards
pp SSO issues =
relationship problems
Secure multi-tenant platform Fully auditable system Secure multi-tenant platform Fully auditable system
SSO issues require complex troubleshooting
Page 21
AssureBridge Solution – Operations
ExpertiseExpertise SSO protocolExpertiseExpertise SSO protocol
TimeTime--ToTo--MarketMarketRapid
TimeTime--ToTo--MarketMarketRapid SSO protocol
configuration Web application
integration
SSO protocolconfiguration Web application
integration
Rapidprovisioning Lightweight SSO adapters
Rapidprovisioning Lightweight SSO adapters
integrationintegration Integration test harness Integration test harness
SecuritySecuritySecuritySecurity OperationsOperationsyy Leverages
industry standards
yy Leverages
industry standards
pp 24x7 support Robust enterprise-
class platform Secure multi-tenant platform Fully auditable system Secure multi-tenant platform Fully auditable system
class platform Early warning system Triage
Page 22
Summary
AssureBridge rapidly delivers reliable SSO empowering you to:
Connect to your partner in record timeConnect to your partner in record time
Support complex SSO standards without adding staffpp p g
Provide your end-users with reliable solution
Avoid an expensive product purchase and installation
Page 23
Q&A
What are your questions?
Page 24
F dditi l i f tiFor additional information, including a personalized demo
please contactplease contact
Oleg CohenOleg CohenAssureBridge, Inc.
[email protected] @ g617-455-7927
Visit our Web Site at:http://www.assurebridge.com
Page 25
APPENDIX
Page 26
How do we solve the problem?Without AssureBridge
Partner A Partner B
Web Site A Web Site B
C i l H G
Integration ($$) Integration ($)
Commercial SSO Product
($$$)
Home-Grown SSO Product
($$)
SSO Infrastructure + Operations ($$)
SSO Infrastructure + Operations ($)
Page 27
How do we solve the problemUsing AssureBridge Services
Partner A Partner B
Web Site A Web Site B
Integration ($) Integration ($)
SSO Exchange:SSO Exchange: ($)gg Hosted AssureBridge SSO Services Robust & Reliable InfrastructureW ld Cl O ti
( )
Page 28
World-Class Operations
DEMOAssureBridge SSO Solution for Speedy Rental
Page 29
Business Case• Speedy Rental is a small regional provider• Reliable Insurance is a large national company
S d h t it t d it b i• Speedy has an opportunity to expand its business by partnering with Reliable Insurance
• Reliable has implemented an expensive commercial• Reliable has implemented an expensive commercial Internet SSO platform
• Reliable requires all its partners to support seamlessReliable requires all its partners to support seamless SAML-based logon for its customers
• Speedy lacks ability to develop and maintain its own SSO solution and is under pressure to deliver
• Speedy chooses AssureBridge to help it quickly and li bl t ith th d di t
Page 30
reliably connect with the demanding partner
BEFORE SINGLE SIGN-ONDemo
Page 31
No SSO Experience – Login Page
Log into Your Site
Page 32
No SSO Experience – Partner Link
Click on External Link
Page 33
No SSO Experience – Need to Log In Again
Prompted to Log In Again
(Another User ID and Password)
Page 34
No SSO Experience – Partner Site
Click on Logout Link
Page 35
No SSO Experience – Logout
Logged Out from Partner
Page 36
No SSO Experience – Still signed in
Remained signed in with
Reliable
Page 37
SINGLE SIGN-ON EXPERIENCEDemo
Page 38
Desired SSO Experience – Login Page
Log into Your Site
Page 39
Desired SSO Experience – Partner Link
Click on Partner Link
Page 40
Desired SSO Experience – Partner Site
Seamlessly taken to
Partner SiteClick on
Logout Link
User ID and Profile Information TransferredTransferred
Between Sites
Page 41
Desired SSO Experience – Logout
Logged OutLogged Out from Partner
Page 42
Desired SSO Experience – Logged Out from All
Signed out from both
sites
Page 43