SINGLE SIGN-ON
Definition - SSO
Single sign-on (SSO) is a session/user
authentication process that permits a user to
enter one name and password in order to
access multiple applications. The process
authenticates the user for all the applications
they have been given rights to and eliminates
further prompts when they switch applications
during a particular session.
Common Examples
Common single sign-on configuration
 Kerberos based systems
 Smart card based system
 One-time password
 Integrated windows authentication
Social Aspect
Following are social aspect of SSO






Reduces phishing success, because users are not trained to enter
password everywhere without thinking.
Reducing password fatigue from different user name and password
combinations
Reducing time spent re-entering passwords for the same identity
Reducing IT costs due to lower number of IT helpdesk calls about
passwords and infrastructure cost
Security on all levels of entry/exit/access to systems without the
inconvenience of re-prompting users
Centralized reporting for compliance adherence.
Potential Issues
As single sign-on provides access to many
resources once the user is initially
authenticated, it increases the negative
impact in case the credentials are
available to other persons and misused.
Therefore, single sign-on requires an
secure authentication mechanism.
List of Products
Following products are available for single
sign-on implementation
 Microsoft Forefront Identity Manager
 IBM – Tivoli security access manager
 Kerberos – Computer network authentication
protocol
 HP Ice Wall SSO – Web and Federated single
sign-on
 Custom in-house built solution
Cost Analysis

In-House Solution = $100,000 (no
additional support cost)

IBM = $590,000 plus annual support costs

Microsoft = $231,000 plus annual support
Based on 5,000 user estimate. Software only costs, no additional hardware figured
into this estimate
Business Aspect
Helps business to bring multiple system into
one umbrella. It allows business to move
multiple applications towards the portal
strategy. Portal lets user to authentication
once and then based on authorization
system allows them to navigate to other
applications.
Summary

Decision to go with Single Sign-On
Security, Safety, User convenience, and reduced IT load
 Customized Proprietary Solution
Cost, adaptability, flexibility
This solution summary is geared towards a large company with 5,000+
users. A small 100 user shop would have different priorities and needs
in the final choice. They might be more likely to go with an off-the-shelf
solution for easier support with a smaller IT staff.
Questions?
 Thank you!