AZ 305 — Single Sign On SSO

Summary

Single Sign-On (SSO) with Enter ID simplifies user authentication by allowing a single sign-in to access multiple applications and services within an organization. Upon signing in, Enter ID creates a security token that grants access to integrated cloud-based and on-premises applications like Microsoft 365, Salesforce, and SAP. Different authentication methods, including Open ID Connect, OAuth, and SAML, are supported for configuring SSO. Additionally, Multi-Factor Authentication (MFA) enhances security by requiring a second device for verification. This system streamlines access while maintaining robust security protocols.

The video is abnormal, and we are working hard to fix it.
Please replace the link and try again.

Q & A

What is Single Sign-On (SSO) with Enter ID?

Single Sign-On (SSO) with Enter ID allows users to authenticate once and access multiple applications and services without needing to authenticate again, using a security token created during the initial authentication.

What kind of applications can Enter ID's SSO be used with?

Enter ID's SSO can be used with both cloud-based applications (such as Microsoft 365, Salesforce, and Dropbox) and on-premises applications (like SharePoint and SAP). It also supports custom-built applications using protocols like SAML, OpenID Connect, and OAuth.

What are the main SSO protocols supported by Enter ID?

The main SSO protocols supported by Enter ID include OpenID Connect, OAuth 2.0, SAML, password-based authentication, linked authentication, integrated Windows authentication, and header-based authentication.

How does OpenID Connect differ from OAuth 2.0?

OpenID Connect is built on top of OAuth 2.0 and provides an additional layer for authentication, while OAuth 2.0 focuses on authorization. OpenID Connect allows for both authentication and authorization in a secure, standardized way.

What is SAML, and how is it used in SSO?

SAML (Security Assertion Markup Language) is an XML-based protocol used for exchanging authentication and authorization data between an identity provider and a service provider. It is commonly used in Federated authentication scenarios.

What is the benefit of Linked Authentication in Enter ID?

Linked Authentication allows users to authenticate using accounts from multiple identity providers, providing flexibility for users with multiple accounts and simplifying the login process.

What is Integrated Windows Authentication in Enter ID?

Integrated Windows Authentication allows users to access applications using their Windows domain credentials. It leverages the current Windows session for seamless authentication without re-entering credentials.

How does header-based authentication work in Enter ID?

In header-based authentication, the application validates an authentication token sent in the request header. This token is used to verify the user's identity and grant access to the application.

What is Multi-Factor Authentication (MFA) and how does it work?

Multi-Factor Authentication (MFA) is a security measure that requires users to provide two forms of authentication, typically a password and a second factor (like a phone) to verify their identity. It protects against password theft by adding an additional layer of security.

How can you configure an application for SSO with Enter ID?

Configuring an application for SSO with Enter ID depends on how the application is set up for authentication. Cloud applications can use protocols like OpenID Connect or SAML, while on-premises applications might use password-based, integrated Windows authentication, or header-based authentication.