ibc presents single sign on 2009

President’s Club Contest

Presented by Melissa Mack, Intuitive Business Concepts

April 27, 2009

iBC SSO Provider

What is the “iBC SSO Provider”?

It is a program developed to allow for one set of logins/passwords to be used for multiple websites (which may comprise the “site” that your members see)

Configurable and “Technology Agnostic” Same domain OR across domains Easy to install and configure (consuming web

applications simply need web.config or settings changes and the ability to call a web service)

Other Site

The technology behind the

solution…Web Organization Domain

IMIS

Site

Domain Cookie

SSO Web Service

Application Session

Store

IMIS User

Store

HTTP Handler

Browser Request/Response

Proxy

SSO Login.Aspx

Session Token

More on the technology…

The SSO Provider utilizes the IMIS 15 User Store as the central user repository

IIS pipeline events is used by the SSO Provider to intercept login requests and validate then it re-routes applications as required

SSO Provider has its own SQL database for storing session related information and reporting

The SSO Web Service is installed on the Clients IIS Server and is invoked by all applications implementing the SSO

The SSO can support multiple user stores (multiple IMIS databases)

SSO provider can support either a shared login page or use a pass through approach for multiple login pages

Shared Login Page

Pass Through Login

Demonstration