SSO Manager

SSO Manager is a Cloud Single Sign-On and Identity Federation platform that supports all of the standard identity protocols - SAML, OpenID, WS-Trust, WS-Federation, and OAuth.

SSO Manager enables employees, consumers, customers, and partners to access cloud and corporate applications using a single username and password. Federated SSO allows users who are authenticated against one directory to access additional applications and services without re-authenticating when a trust relationship has been established.

SSO Manager acts as an authentication gateway or broker allowing internal corporate users to login with their Active Directory accounts and then seamlessly sign into cloud applications like SalesForce.com, Webex, or Google Apps. Business partners or customers have the same single sign-on experience for corporate applications like Microsoft SharePoint 2010 and may sign in with their corporate credentials or even their social media identities like Google Apps, Facebook, Windows Live, Yahoo, and others. This new model eliminates multiple usernames and passwords and enables single sign-on between organizations. SSO Manager dramatically increases security by enforcing stronger authentication controls including time-based one-time passwords and knowledge-based questions for identity proofing.

Key Benefits:

• Reduces the cost of password management as users are required to only remember one set of credentials
• Strengthens security and reduces the risk of a breach by providing a single centralized authentication point for applying stronger policies
• Creates new revenue opportunities allowing partners and customers to securely sign-up and access corporate resources
• Frees constrained technical resources from unneeded direct participation by securely delegating to users and privileged staff
• Speeds deployment by shipping with over 25 ready-to-use workflows for SSO

Key Features:

• Standards-based: Supports all of the standard federation protocols OpenID, SAML, WS-Fed, and OAuth
• Supports a large number of Internet and Corporate Identity Providers including: EmpowerID, Active Directory, LDAP, Facebook, OpenID, Twitter, SalesForce.com, Google, Yahoo, and others
• Supports the Federation roles of Identity Provider and Service Provider
• Built-in Identity Provider stores Person identities in the EmpowerID metadirectory
• Unique Login Workflow handles on-demand provisioning and linking of identities as a user logs in
• Acts as a SharePoint Claims Provider (IdP) and Claims Augmentation Provider to enabled Role-Based and fine-grained access control
• Fully programmable: Allows custom Federation Extensions to be created in the Workflow Studio C# development environment