1. Single sign-on Mike Ladd Nazia Raoof Bret Walker
Kumar Mukherjee Rajesh Radhakrishnan

2. Background User wants to log in once
Access multiple applications or third party sites
Log in with his or her credentials/profile
Business case:
corporation has 15,000 retail stores
loose more than $1,000,000 per year
due to high labor costs
associated with multiple authentication, unnecessary user clicks, forgotten passwords, firewall issues

3. Challenges Write your own SSO server? Myriads of interfaces to write
Buy?
Limited options
Proprietary implementations
Legacy applications, Solutions, Content Management solutions, Mainframe/Unix/Windows, owned solutions
Availability of connectors
JOSSO/SAML emerging but in infancy
Open to whole world scenario if not carefully planned
Build or Buy decisions
Integration issues
Still in infancy & little or no standards
High availability and Enterprise wide issues
Service offerings vs. appropriate users
Licensing issues
Security assertion

4. Industries Agriculture Automotive Transportation Construction
SSO technology is applicable to any industry involved in using multiple applications and multiple computers systems with authentication requirements:
Users have enough to worry about in their pressure-packed jobs without having to remember multiple passwords for multiple applications and multiple PC terminals that they may have to use at work.
Cost are associated with users calling help desk for password resets
Password inflation and security weaknesses raised by multiple logons.
SSO access management infrastructure to control user access to its tools for product development, procurement and supply chain management, etc
SSO allows users access to only applications and resources they have been authorized to access.
Agriculture
Automotive
Transportation
Construction
Education
Financial Services
Government
Healthcare
Real Estate

5. Technology Pros Cons LDAP Widely used Might not be supported by app
Complex coordination
Kerberos
Complex
May not be open to outside world
Custom solution
Fits needs exactly
Single use
Potentially more complex / insecure
Windows Live ID
Web-based
Users may already have account
Not widely supported
Managed by third party 5

6. Questions?
Road Runners will discuss a solution for this issue on June 7, Don’t miss it!