sso and authentication off campus simplesamlphp and saml2
play

SSO and authentication off campus: SimpleSAMLphp and SAML2 - PowerPoint PPT Presentation

Aug 14, 2023 •489 likes •583 views

SSO and authentication off campus: SimpleSAMLphp and SAML2 Jacob-Steen Madsen (jsm@wayf.dk) The setting Services Institutions 1 X LOGIN Shib SAML2 WAYF 2 CAS Y LOGIN CAS + LDAP SAML2 Consent-db 3 Z LOGIN Agreement A look at

  1. SSO and authentication off campus: SimpleSAMLphp and SAML2 Jacob-Steen Madsen (jsm@wayf.dk)

  2. The setting

  3. Services Institutions 1 X LOGIN Shib SAML2 WAYF 2 CAS Y LOGIN CAS + LDAP SAML2 Consent-db 3 Z LOGIN Agreement

  4. A look at the scary fish http://rnd.feide.no/view/ simplesamlphpdocs

  5. SSO isles

  6. SSO isles

  8. WAYF SSO Local SSO Kalmar SSO service service service

  9. Challenges and future • Heimat • Scoping (a small wayf) • Classification of IdP’s • Balancing between pushing a protocol and a product. • Log-out.......pheeewww

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

SimpleSAMLphp EuroCAMP 2010 Olav Morken olav.morken@uninett.no SimpleSAMLphp Mainly a SAML

SimpleSAMLphp EuroCAMP 2010 Olav Morken olav.morken@uninett.no SimpleSAMLphp Mainly a SAML

SimpleSAMLphp EuroCAMP 2010 Olav Morken olav.morken@uninett.no SimpleSAMLphp Mainly a SAML 2.0 Service Provider and Identity Provider 2 Targets the SP lite and IdP lite profiles (with some limitations) Written entirely in PHP

713 views • 29 slides
UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity

UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity

UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity System UCSBnetID authentication UCSB-wide student and employee info http://www.identity.ucsb.edu/ LDAP Overview Lightweight Directory Access Protocol

604 views • 24 slides
AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is

AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is

SECURITY TOPICS PART 2 AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is who they say they are and therefore permitted to access the requested resources: getting entrance to a computer lab

833 views • 44 slides
Single Sign On SimpleSAMLphp CivicActions | SSO | Dan Gurin | tweeter@dgurin | Drupal.org +

Single Sign On SimpleSAMLphp CivicActions | SSO | Dan Gurin | tweeter@dgurin | Drupal.org +

Single Sign On SimpleSAMLphp CivicActions | SSO | Dan Gurin | tweeter@dgurin | Drupal.org + GitHub + LinkedIn = DANGUR Enterprise level user account costs Administration Setup Retire Support Password resets

669 views • 24 slides
HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the

HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the

HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the process of verifying the identity of the communicating principals to one another Usually sub-divided into Entity authentication Authentication

288 views • 10 slides
Authentication Most technical security safeguards have Authentication authentication as a

Authentication Most technical security safeguards have Authentication authentication as a

Authentication Most technical security safeguards have Authentication authentication as a precondition How to authenticate: Something you know Password, Secrets Something you have Smart Card, Token Something you are Biometrie

607 views • 4 slides
Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Cryptography Authentication and Data Integrity Aims of Authentication Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication with Hash Cryptography Functions Authentication with MACs School of

1.66k views • 27 slides
Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Cryptography Authentication and Data Integrity Aims of Authentication Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication with Hash Cryptography Functions Authentication with MACs School of

613 views • 27 slides
A2: Broken Authentication and Session Management But first Authentication, Authorization,

A2: Broken Authentication and Session Management But first Authentication, Authorization,

A2: Broken Authentication and Session Management But first Authentication, Authorization, Sessions Authentication Determining user identity Multiple ways What you know (password) What you have (phone, RSA SecureID, Yubikey)

1.57k views • 28 slides
Web Authentication Thierry Sans Several Methods Local authentication with login and password

Web Authentication Thierry Sans Several Methods Local authentication with login and password

Web Authentication Thierry Sans Several Methods Local authentication with login and password Token-based authentication Third party authentication Local Authentication How to store and verify password? Clear Data can be hacked

615 views • 14 slides
The Authentication Jungle An overview of all sorts of authentication technologies Karol Babioch

The Authentication Jungle An overview of all sorts of authentication technologies Karol Babioch

The Authentication Jungle An overview of all sorts of authentication technologies Karol Babioch Security Engineer kbabioch@suse.de New authentication standards ... 2 Some authentication technologies ... 3 - Authentication theory -

1.28k views • 88 slides
Outline Introduction Authentication Basic authentication mechanisms CS 239

Outline Introduction Authentication Basic authentication mechanisms CS 239

Outline Introduction Authentication Basic authentication mechanisms CS 239 Authentication on a single machine Computer Security Authentication across a network February 21, 2007 Lecture 9 Lecture 9 Page 1 Page 2 CS 236,

302 views • 8 slides
I know who you are, but you can't come in Authentication and single sign-on in the SAS platform

I know who you are, but you can't come in Authentication and single sign-on in the SAS platform

I know who you are, but you can't come in Authentication and single sign-on in the SAS platform Agenda Authentication Inbound authentication Outbound authentication Single Sign-on Definitions Stage Process Method Physical

781 views • 48 slides
HOST PUF-Based Authentication ECE 525 PUF-Based Authentication PUF-based protocols have been

HOST PUF-Based Authentication ECE 525 PUF-Based Authentication PUF-based protocols have been

HOST PUF-Based Authentication ECE 525 PUF-Based Authentication PUF-based protocols have been proposed for applications including: Encryption and authentication For detecting malicious alterations of design components For

645 views • 15 slides
1 Password-Based Authentication Node A has a secret ( password ): e.g., lisa To

1 Password-Based Authentication Node A has a secret ( password ): e.g., lisa To

Authentication Protocols Guevara Noubir College of Computer and Information Science Northeastern University noubir@ccs.neu.edu Outline Overview of Authentication Systems [Chapter 9] Authentication of People [Chapter 10]

396 views • 17 slides
THE STATE OF AUTHENTICATION Chad Spensky Allthenticate OUTLINE Who am I? Authentication

THE STATE OF AUTHENTICATION Chad Spensky Allthenticate OUTLINE Who am I? Authentication

THE STATE OF AUTHENTICATION Chad Spensky Allthenticate OUTLINE Who am I? Authentication overview Current state of Authentication The future of authentication MY JOURNEY 2012-2015 2004-2011 2015-Present 1998-2004 Staff at MIT

453 views • 34 slides
Tmux and Screen Limitations of the terminal How do we multitask? Graphical

Tmux and Screen Limitations of the terminal How do we multitask? Graphical

Tmux and Screen Limitations of the terminal How do we multitask? Graphical environments usually have tabs and windows, but what if were not in one? You can background tasks, but its not intuitive How do we keep a session

318 views • 30 slides
Chukwa: a scalable log collector Ari Rabkin and Randy Katz UC Berkeley USENIX LISA 2010 With

Chukwa: a scalable log collector Ari Rabkin and Randy Katz UC Berkeley USENIX LISA 2010 With

UC Berkeley Chukwa: a scalable log collector Ari Rabkin and Randy Katz UC Berkeley USENIX LISA 2010 With thanks to Eric Yang, Jerome Boulon, Bill Graham, Corbin Hoenes, and all the other Chukwa developers, contributors, and users Why

584 views • 35 slides
ESS00 ESS00 New w Em Employee ee ES ESS S Bas asics cs Welcome to Travis County. This

ESS00 ESS00 New w Em Employee ee ES ESS S Bas asics cs Welcome to Travis County. This

ESS00 ESS00 New w Em Employee ee ES ESS S Bas asics cs Welcome to Travis County. This course shows you basic information to use SAP Employee Self-Service (ESS). Audio. Please turn on your speakers and headset or ear buds now and make

262 views • 14 slides
Getting Started with UNIX What is UNIX? Getting Started with UNIX Operating System

Getting Started with UNIX What is UNIX? Getting Started with UNIX Operating System

What is UNIX? Getting Started with UNIX What is UNIX? Getting Started with UNIX Operating System Operating System Boston University Boston University Information Services & Technology Information Services & Technology

359 views • 7 slides
Related Service Provision 101 Feb. 22 & March 9, 2018 OSSE Division of Data, Assessment, and

Related Service Provision 101 Feb. 22 & March 9, 2018 OSSE Division of Data, Assessment, and

Getting Started with SEDS: Related Service Provision 101 Feb. 22 & March 9, 2018 OSSE Division of Data, Assessment, and Research OSSE Division of K-12 Systems and Support OSSE Division of Teaching and Learning Agenda I. Gaining access to

662 views • 30 slides
What is one of the most important concepts that we have covered? Enter your answer(s) in the chat

What is one of the most important concepts that we have covered? Enter your answer(s) in the chat

What is one of the most important concepts that we have covered? Enter your answer(s) in the chat box. Poll to be taken near end of class: What time(s) do you prefer for a Tuesday problem session? 11am, 12:30pm, 4:30pm, 6pm Exam 2 will be

607 views • 28 slides
Overview of HTTP Mutual Overview of HTTP Mutual authentication protocol authentication protocol

Overview of HTTP Mutual Overview of HTTP Mutual authentication protocol authentication protocol

Overview of HTTP Mutual Overview of HTTP Mutual authentication protocol authentication protocol proposal proposal Yutaka OIWA Yutaka OIWA RCIS, AIST RCIS, AIST July 26, 2010 July 26, 2010 Motivation Motivation Current HTTP

445 views • 11 slides
Using Espera, Lync Response Group agents make the right choice every time. Espera ensuring

Using Espera, Lync Response Group agents make the right choice every time. Espera ensuring

Provides Lync Response Groups with Real-Time Call Waiting Information Espera by AdvaTel for Lync Esperas real -time call waiting information ensures the agent makes the right choice every time for their Lync Response Group Should agents

497 views • 11 slides

More recommend