1. Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Central Security Server In order to use Cloud Authentication and Authorization system, user needs PIV card and smart card reader Cloud Authentication and Authorization System comprises Central Security Server and Portal Security Server. Portal Web Server is behind Portal Security Server. User needs Cloud Login Client on his/her workstation. Portal Security Server Web / Portal Server

2. Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Cloud Login Client is installed on a User Workstation and can be activated using its icon on the desktop.

3. Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Central Security Server Cloud Login Client displays login panel. Several Central Security Servers are already pre-configured and the one to perform initial authentication is selected. User enters his/her smart card PIN.

4. Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Central Security Server Cloud Login Client opens PIV card, reads PIV Authentication Certificate and sends it to the Central Security Server. The Server performs strong authentication challenge/response protocol with the PIV card and when successfully completed issues SAML ticket. SAML Ticket Authentication Certificate

5. Cloud PIV Authentication and Authorization Demo User Workstation Central Security Server Next, Internet Explorer is automatically started and directed to the Portal Security Server. PIV Card SAML Ticket Portal Security Server Web / Portal Server

6. Cloud PIV Authentication and Authorization Demo User Workstation Central Security Server Portal Security Server fetches SAML ticket and uses it for single sign-on authentication. When completed, it displays success message. PIV Card SAML Ticket Portal Security Server Web / Portal Server

7. Cloud PIV Authentication and Authorization Demo User Workstation Portal Security Server Web / Portal Server After that, Portal Security Server re-directs users request to the Web Portal, which displays its home page. Accessing Portals pages is also controlled by the Portal Security Server. PIV Card SAML Ticket