1. Time Entry Security

2. Portal Login User Logs in, user id, password System sends id,pw to SAML SAML authenticates If valid, SAML returns a valid SAML Artifact Artifact is passed from portal to application at startup.

3. Portal Login UserName Password : ClientPortal SAML Login Artifact Portal Channels Client Leave / Time Entry Client Emplid Artifact

4. Leave / Time Entry Save Client stores Artifact from portal Submits artifact and data on save requests Web Services validate artifact, write audit, then perform operation

5. Leave / Time Entry Save Impersonating Lori Krug PBS -> Change to Chuck Miller Chuck Miller view Laura

6. Email (Audit) To: Haller, Laura E. You have Taken 8 hours Sick Leave Taken from 08/06/2009 at 08:00 to 08/06/2009 at 17:00. Details: Employee: Haller, Laura E. Emplid: 155005 Hours: 8 Start: 08/06/2009 at 08:00 End: 08/06/2009 at 17:00 Earn Code: SCK Type: Sick Leave Taken Description: Cough Comments: SAML User: 186117, Kittredge, David Portal User: 147011, Krug, Lori C Selected User: 176379, Miller, Chuck No Action required unless this is in error. Please go to https://my.cu.edu if you need to modify this.https://my.cu.edu ServerName: webtest1.cusys.edu/10.10.10.241

7. Email (Audit) select * from ps_leave_audit where emplid = '155005';

8. Leave / Time Entry Save Client Web Service SAML Save Artifact Emplid or error Write to database / audit Leave / Time Entry Artifact, data Extracts emplid from Artifact Result Msg Database Results

9. Submit Time Employees to digitally sign timecards Can we use same authentication?