Single Sign-On

alt

During a session, users typically interact with multiple back-end applications and data resources. To simplify user experience and to increase the level of security, PortWise Access Manager includes Single Sign-On features to allow an authenticated PortWise user seamless access to internal applications and data resources without having to re-authenticate.

Most users have to remember several passwords to gain access to their applications, often resulting in passwords being written down, forgotten, or shared with multiple recipients. Such practices lead to insecure systems and high cost due to the increased support call volume IT help desks receives due to password resets. PortWise allows users to access all their resources once authenticated. PortWise Single Sign-On is policy based and can be enabled or disabled depending user identity or authentication method used to logon to PortWise. PortWise Access Manager provides a number of different mechanisms for Single Sign-On, including:

Web SSO - allows a transparent logon service to any Web based application.

Application SSO - In addition to web application Single Sign-On (Web SSO), PortWise Application SSO provides Single Sign-On to client/server applications, such as Windows Terminal Server, Citrix, Windows File Share, and Telnet.

Ticket SSO - Ticket SSO enables organisations to use web services (SOAP) for Single Sign-On to web applications. Ticket SSO can be used both for internal web applications as well as for SSO to SaaS applications, such as SalesForce.

Identity Federation - provides SSO to both internal and external applications by propagating user credentials across different administrative domains.