Identity Federation and SSO for SaaS Applications
Support Secure, Cross-company, Cross-domain Access with One Set of Credentials
Challenge
IT is pressured to provide easy access to an exploding number of cloud applications as quickly as possible to meet business needs while keeping company data secure. But rolling out app access securely, especially when having to deal with older assets such as LDAP servers or Active Directory forests behind a corporate firewall, is slow, costly, and frustrating.
Solution
Industry analyst Gartner reports that a growing number of companies are choosing to use identity and access management as a service (IDaaS) to provide federation capabilities rather than on-premises federation solutions, and the use of federation IDaaS is becoming more common especially for single sign-on (SSO) to SaaS application use cases.
Benefits
With OneLogin, the federation of identity seamlessly enables the portability of identity information across otherwise autonomous security domains so employees can easily get into internal or external applications, while both partners and customers can securely access company data or systems, without the need for redundant user administration.
OneLogin comes with additional benefits such as an app catalog with pre-integrated applications for faster integration, Single Sign-On with Multi-Factor Authentication, and role-based access control policies.
Key benefits of identity federation include:
- Identity federation leverages standard, secure protocols as SAML, OpenID and OAuth, such that only active users in the corporate directory are allowed access to apps based on policy, while unnecessary per-app passwords are eliminated.
- Requesting identity assertions from a partner domain rather than maintaining directories of the partner’s employees reduces the risk of inappropriate access.
- Modern identity solutions were designed specifically for adding and removing applications – with no more than a few minutes rather than a few hours to configure an app. Access control is granted to employees automatically and instantly based on roles or other attributes.
- Implementing real-time provisioning of user information from your corporate directory to SaaS applications as part of an identity federation solutions greatly increases business flexibility.
- Identify Federation not only supports existing investments such as external directories, but it supports federating identities from several different directories such Active Directory, OpenLDAP and Workday – all with the same solution.
