1. 1 E-Authentication The E-Authentication/Grants Demonstration

2. 2 E-Authentication E-Authentication Grants Pilot  Multiple Federal agency partners  E-Authentication-enabled applications  SAML-based (Security Assertion Markup Lang.)  Demonstrates multi-domain single sign on (MDSSO)  Involving a variety of systems and platforms

3. 3 E-Authentication System Components Overview USDA Users ORC Grants.gov FastLane Credential Service Providers Agency Applications E-Authentication Portal

4. 4 E-Authentication E-Authentication Portal Users E-Authentication Portal Primary Access Point for E-Authentication Lists the available applications Lists the associated credential service providers

5. 5 E-Authentication Credential Service Providers USDA Users ORC Credential Service Providers Provide the logon interface Validate the provided credentials Are trusted partners

6. 6 E-Authentication Agency Applications Users Grants.gov FastLane Agency Applications Provide the agency specific functions Must be E-Authentication enabled

7. 7 E-Authentication Demonstration Outline  Use of a USDA credential service to access the NSF FastLane application (use of external credentials)  Use of a commercial credential service to access the same agency application (use of third-party credentials)  Use of the USDA credential service to access the Grants.gov portal application and the NSF FastLane application (use of external credentials and single sign on to multiple agency applications)

8. 8 E-Authentication Case 1: FastLane application is accessed using an external credential service  User Terry McBride Starts at the Firstgov.gov E-Authentication Portal Selects the NSF FastLane application Selects the USDA Credential Service Username and password is validated

9. 9 E-Authentication Demo Case 1

10. 10 E-Authentication Case 2: FastLane application is accessed using an ORC credential – Terry can use either credential at the FastLane application  User Terry McBride Starts at the Firstgov.gov E-Authentication Portal Selects the NSF FastLane application Selects the ORC Credential Service Username and password is validated

11. 11 E-Authentication Demo Case 2

12. 12 E-Authentication Case 3: USDA credential is used to access the Grants.gov and the NSF FastLane application, demonstrating multi-domain single sign on  User Terry McBride Starts at the E-Authentication portal Selects the NSF FastLane application Checks Remember Credential Service box Selects the USDA credential Selects Grants.gov from favorites and is redirected without re-authenticating

13. 13 E-Authentication Demo Case 3