Working with Single Sign-On authentication

about single sign on authentication the goal of federated single sign on authentication is to enable users to maintain secure access across a range of external systems and web applications supports the use of various protocols that help organizations accomplish this goal through the use of microsoft active directory federation services (adfs) and security assertion markup language (saml), customers can use their existing windows integrated security credentials to sign on to their tenant without having to enter a new password single sign on authentication was originally designed to handle identity management within a network domain or other closed application, allowing users to log in once to get into their application and carry those credentials through to other systems within their environment however, with , single sign on authentication has become more difficult to manage as users typically access many systems and applications that cross different companies and domains many companies have designed proprietary protocols to meet the challenge of web browser single sign on, leading to interoperability between providers there must be trust established between the principal (user), the identity provider (initial authentication source), and the service provider (web application) open source security protocols seek to exchange authorization and authentication between security domains, such as an identity provider (that is, the customer domain) and the service provider (that is, ) at the request of the user, credentials are passed to the application this type of protocol is not concerned with how the user was authenticated initially adfs is a claims based identity tool, using active directory domain services to authenticate the user and issue a token that contains identity information federation servers located within both security domains exchange tokens without storing any user names or passwords the user has to only enter their user name and access is granted without direct authentication to the application saml uses an identity provider and a service provider to grant access to an application through a web browser the identity provider in this case is adfs running on the domain of the customer to set up users for authentication via the , refer to setting up itsm users for authentication via the neurons platform docid\ wnkkhhscs2a4b5njr5ng4 and authentication https //help ivanti com/ht/help/en us/cloud/vnow/authentication htm this feature is early access only and may not be available in your environment for more information, please contact your customer success manager related topics javascript\ void(0);