Upload
marcus-allen
View
222
Download
2
Tags:
Embed Size (px)
Citation preview
Enterprise Single Sign OnEnterprise Single Sign On
Enterprise Single Sign OnEnterprise Single Sign On
Identity management for web applications
Identity management for web applications
Enterprise Single Sign OnEnterprise Single Sign On
What is Single Sign OnWhat is Single Sign On
Single sign-on (SSO) is a mechanism whereby a single action of user authentication and authorization can permit a user to access all computers and systems where he has access permission, without the need to enter multiple passwords
Single sign-on (SSO) is a mechanism whereby a single action of user authentication and authorization can permit a user to access all computers and systems where he has access permission, without the need to enter multiple passwords
Enterprise Single Sign OnEnterprise Single Sign On
SSO with Web BoosterSSO with Web Booster
Authenticates with Microsoft Windows, creates access tokens for other systems
Users logged in to their workstation can auto-login to web applications
Authenticates with Microsoft Windows, creates access tokens for other systems
Users logged in to their workstation can auto-login to web applications
Enterprise Single Sign OnEnterprise Single Sign On
Benefits to UsersBenefits to Users Only have one username and password to
remember No more post-it! notes on monitor with
account details Fast Seamless Works with BlackBerry handheld devices
Only have one username and password to remember
No more post-it! notes on monitor with account details
Fast Seamless Works with BlackBerry handheld devices
Enterprise Single Sign OnEnterprise Single Sign On
Benefits to Operations StaffBenefits to Operations Staff
Central user account management Common way to manage accounts Web Booster ESSO is quick to deploy No changes to existing servers No more post-it! notes ;-)
Central user account management Common way to manage accounts Web Booster ESSO is quick to deploy No changes to existing servers No more post-it! notes ;-)
Enterprise Single Sign OnEnterprise Single Sign On
SecuritySecurity
Choose between NTLM or Kerberos authentication
All data is encrypted and verified against Windows Domain Controllers or KDC servers
Traffic to browser may be SSL encrypted
Choose between NTLM or Kerberos authentication
All data is encrypted and verified against Windows Domain Controllers or KDC servers
Traffic to browser may be SSL encrypted
Enterprise Single Sign OnEnterprise Single Sign On
Built on Web BoosterBuilt on Web Booster
Get all existing Booster features Content compression Clustering Load sharing Dynamic failover …plus much more
Get all existing Booster features Content compression Clustering Load sharing Dynamic failover …plus much more
Enterprise Single Sign OnEnterprise Single Sign On
ConsiderationsConsiderations Need to ensure workstations are not
compromised or left unattended Windows Domain structure may need to be
rationalized for NTLM to work correctly Need to identify weak spots in
infrastructure to avoid single failure points, eg: LDAP
Need to ensure workstations are not compromised or left unattended
Windows Domain structure may need to be rationalized for NTLM to work correctly
Need to identify weak spots in infrastructure to avoid single failure points, eg: LDAP
Enterprise Single Sign OnEnterprise Single Sign On
NTLM vs KerberosNTLM vs Kerberos
NTLM more widely supported in older versions of Windows (pre win2K)
NTLM is easier to configure initially Kerberos is more secure Kerberos is not tied to Windows
NTLM more widely supported in older versions of Windows (pre win2K)
NTLM is easier to configure initially Kerberos is more secure Kerberos is not tied to Windows
Enterprise Single Sign OnEnterprise Single Sign On
RequirementsRequirements
Windows workstations Windows domain Lotus Domino and/or IBM WebSphere
servers (more coming soon)
Windows workstations Windows domain Lotus Domino and/or IBM WebSphere
servers (more coming soon)
Enterprise Single Sign OnEnterprise Single Sign On
Who uses Web Booster?Who uses Web Booster?Some of our customers include…
Enterprise Single Sign OnEnterprise Single Sign On
Questions…Questions…
Email: [email protected] Web: http://www.puakma.net/booster Contact one of our business partners
Email: [email protected] Web: http://www.puakma.net/booster Contact one of our business partners