During a session, users typically interact with multiple back-end application and data resources.
Technologies like Single Sign-On and next generation identity federation simplify the user experience. Disparate application and data resources can appear to the user as one homogenous group regardless of their type or location.
Single Sign-On
Single Sign-On (SSO) permits users to enter their credentials once, which then gives them access to several resources without the need to re-authenticate when accessing each resource. All resources available with the same user credentials can be defined in a SSO domain. When the user credentials are modified, the changes apply to all resources in the domain.
When using the system for the first time, users are prompted for SSO credentials (user ID and password). The credentials are stored per user account and retrieved whenever the user accesses resources registered in a SSO domain. If credentials are changed, the user will be prompted for authentication.
Identity federation
Stonesoft SSL VPN provides standards-based identity federation. By using the latest SAML 2.0 and ADFS standards, the StoneGate SSL VPN solution is compliant with any existing third-party identity federation deployments.
Next generation sign-on provides trusted authentication between directories for securing B2B, B2C and easing the merging of organizations' IT infrastructure.
One digital identity can be used to access multiple domains without the need for costly user enrollment. This is ideal for business-to-business partnerships, mergers and acquisitions.