Available SSO solutions

[James kunjumen]

Dear all, 

In UN OCHA for long time we have successfully used internally developed SSO (Single Sign-ON) solution which tightly integrate with MS .NET based applications. But now we face some difficult challenges while integrating mixed LDAPs (for internal and external users) with various tools running on different platforms like Drupal, Sharepoint (2007, 2010), Domino apps, Agile point etc.

Currently we are exploring some enterprise based third party SSO solutions which could be compatible with rapid changes in the versions and also provide room for customization if required. 

Can I have list of SSO solutions in your organisation with pros and cons to help us identify/filter out the best solution in the market ? 

Also any feedback on OpenId (http://openid.net/) integration with internal applications will be appreciated. 

Many thanks for your response, 

James Kunjumen

917-1721

[Mark Jaroski]

Hi James,

We've concluded that OpenID is pretty much the only way of doing this sort of thing, and have deployed an OpenID provider on both our external partners LDAP and on our internal AD domain.  

One interesting point is that in order to use the OpenID provider on our internal domain the user must either be present on campus or logged in via VPN. It works because although the OpenID provider itself must face the public Internet the authentication part can stay behind the firewall.

I'd be willing to meet if you would like more detail.

all the best,

-mark

James Kunjumen

917-1721

--
If you would like to get more involved please write to andy....@gmail.com or call +336 11 53 44 83. Suggestions for meeting topics and speakers are highly encouraged.
 
You received this message because you are a valued member of the "Geneva Web Group" group. Send your emails to geneva-w...@googlegroups.com.
 
----------------------------------------------------------------
To unsubscribe from this group, send email to
geneva-web-gro...@googlegroups.com
 
For more options, visit this group at
http://groups.google.com/group/geneva-web-group?hl=en-GB

[Nicolas Bocquet]

HI,

Have you think about an implementation of Shibboleth? 

Shibboleth is able to be connected by more than one source of authentication. To be able to see if your application can work with, is to look if there is a SAML2 plugins avalaible.

I know  ( and experimented ) that Shib is working well with Drupal, SharePoint. For Domino Apps, i saw some 3rd party like http://www.pistolstar.com/ can help.

Regards,

--
Nicolas Bocquet