assurebridge - company whose employees require sso into many externally hosted online services -...

Oleg Cohen

[email protected]

AssureBridgeB2B Single Sign-On (SSO) Made Easy

ACME Needs SSO Integration Assistance

ACME Intranet

ACME Employee

mailto:[email protected]

http://www.assurebridge.com/solutions/where-can-assurebridge-help/you-need-to-connect-your-employees-to-a-saas-service/

AGENDA

Business Problem

What is AssureBridge

Value Proposition

Demo

AssureBridge Difference


Business Problem –Your employees connect to many externally hosted online services

ACME Needs SSO Integration Assistance

ACME Intranet

ACME Employee


Customer Need

BUSINESS DRIVER:

Allow employees to use a single corporate user name and password to securely access many hosted online services

CUSTOMER PAINS: Employee frustration managing many IDs and passwords ID and password proliferation increases risk of breach Costly to comply with employee termination policies High costs and security risks of custom SSO solutions

CUSTOMER NEED:Implement and support SSO connections with multiple online companies

Partner 2Partner 2

Your Corporate Intranet Partner 2Hosted

Service


AssureBridge Offering – SSO Exchange

Fully-Managed Hosted Single Sign-On ServiceFully-Managed Hosted Single Sign-On Service

Seamlessly logs employees into hosted online services

Connects to corporate directory Passwords never leave the company

Provides professional setup, configuration,troubleshooting, and monitoring

by AssureBridge experts


Our customers:

Value Proposition – Consistent DeliveryO

UR

ST

RE

NG

TH

S

Fastest Implementation

Va

lue

Pro

po

sit

ion

Customer Satisfaction

Reliable Hosting

Expertise

• Painlessly integrate with multiple online services


Our customers:

Value Proposition – ExpertiseO

UR

ST

RE

NG

TH

S


Va

lue

Pro

po

sit

ion


Reliable Hosting

Expertise


Are shielded from implementing and maintaining complex Single Sign-on products


Value Proposition – SupportO

UR

ST

RE

NG

TH

S


Va

lue

Pro

po

sit

ion


Reliable Hosting

Expertise

Our customers:

Are shielded from implementing and maintaining complex Single Sign-on products


Leverage fault-tolerant infrastructure and expert support to maximize service uptime


Value Proposition – Cost SavingsO

UR

ST

RE

NG

TH

S


Va

lue

Pro

po

sit

ion


Reliable Hosting

Expertise

Our customers:

No longer required to invest into hiring and retaining expensive and hard-to-find experts

• Painlessly integrate with multiple service partners

Leverage fault-tolerant infrastructure and expert support to maximize service uptime

Benefit from timely Internet SSO solution with lowest

support costs


AssureBridge Positioning

For corporations whose employees connect to multiple online services

For corporations whose employees connect to multiple online services

SSO Exchange is an affordable full-service hosted solution

that delivers the most reliable standards-compliantSSO functionality with the least amount of effort

SSO Exchange is an affordable full-service hosted solution

that delivers the most reliable standards-compliantSSO functionality with the least amount of effort

To enable high level of employee satisfaction and maximum safety of employee account information

To enable high level of employee satisfaction and maximum safety of employee account information


DEMO*AssureBridge SSO Solution

* Demo Screenshots are coming soon …


Secure Internet SSO is Highly Complex

Speedy Rent-A-Car Domain (https://www.speedyrental.com)

Reliable Insurance Domain (https://www.reliableinsurance.com)

IDM

Speedy Rentals Secure Partner Site

SAML Identity Provider (IDP)

Reliable Insurance

SAML Service Provider (SP)

Customer

Link to Rent a Car

Step 1a: User logs into Reliable Site Step 1b: User Clicks on Rent-A-Car Site Link

Step 2a: Portal Sends Request to IDP Step 2b: IDP gets attributes, builds SAML Assertion , signs with a Partner A’s Private Key

1

2

3

4

7

8

Custom SSO Plug-in

Application Component

9

5

6

Step 3: IDP Redirects to Browser with a SAML artifact token

Step 4: User Browser redirects artifact token to SAML SP

Step 5: SP requests SAML assertion via a SOAP service

Step 6: IDP returns SAML assertion via a SOAP service

Step 7a: SP validates SAML Assertion Cryptographic signatureStep 7b: SP send s browser secure SAML token with encrypted user attributes

UserStore

UserStore

Step 8: Browser redirect User to Speedy Rental site with secure SAML token in request

Step 9: Decodes the token, extracts user info and binds into Portal session context.

Internet SSO in

volves

many complex

interactions among

multiple partie

s

Secure and reliable Internet SSO involves many complex interactions among multiple

distributed parties. AssureBridge shields your IT staff from these complexities.

Secure and reliable Internet SSO involves many complex interactions among multiple

distributed parties. AssureBridge shields your IT staff from these complexities.


Key SSO Challenges

Expertise True experts

are hard to find Knowledge gaps

are risky



are risky

Time-To-Market Build, implement,

and integrate Negotiate and coordinate with

service providers



service providers

Security Potential legal

and audit exposure

Data privacy protection issues


and audit exposure


Operations SSO issues =

employeedissatisfaction

SSO issues require complex troubleshooting





Key SSO Challenges – Expertise


and audit exposure



and audit exposure










service providers



service providers



are risky



are risky


AssureBridge Solution – Expertise



service providers



service providers


and audit exposure



and audit exposure








Expertise SSO protocol

configuration Corporate directory

integration



integration


Key SSO Challenges – Time-To-Market


and audit exposure



and audit exposure



employee dissatisfaction







service providers



service providers



integration



integration


AssureBridge Solution – Time-To-Market


and audit exposure



and audit exposure




integration



integration

Time-To-Market Rapid

provisioning Turnkey SSO gateway Integration test harness










Key SSO Challenges – Security



integration



integration






and audit exposure



and audit exposure









AssureBridge Solution – Security


relationship problems



relationship problems




integration



integration





Security Leverages

industry standards

Secure multi-tenant platform Fully auditable system

Security Leverages

industry standards









Key SSO Challenges – Operations



integration



integration





Security Leverages

industry standards


Security Leverages

industry standards









AssureBridge Solution – Operations



integration



integration





Security Leverages

industry standards


Security Leverages

industry standards


Operations 24x7 support Robust enterprise-

class platform Early warning system Triage

Operations 24x7 support Robust enterprise-

class platform Early warning system Triage


Summary

AssureBridge rapidly delivers reliable SSO empowering you to:AssureBridge rapidly delivers reliable SSO empowering you to:

Quickly connect with online services

Support many SSO integrations without draining staff

Provide your employees with rock-solid solution

Avoid an expensive product purchase and installation


For more information please visit our Web Site at

http://www.assurebridge.com

and contact

Oleg CohenAssureBridge, Inc.

[email protected]

888-409-6995

617-455-7927

http://www.assurebridge.com/

mailto:[email protected]


APPENDIX


How we solve the problemWithout AssureBridge

YouYou Your Online ServiceYour Online Service

Your Portal

Commercial SSO Product ($$

$)

Service Web Application

Integration ($$)

SSO Infrastructure + Operations ($$)


How we solve the problemUsing AssureBridge Services

Partner APartner A Partner BPartner B

Web Site A

SSO Exchange: Hosted AssureBridge SSO Services Robust & Reliable Infrastructure World-Class Operations

Web Site B

Integration ($)

($)


DEMOAssureBridge SSO Solution for Speedy Rental


Business Case• ACME is a successful mid-size manufacturing firm• ACME uses a number of online applications including

CA Clarity, Saleforce.com, Service-Now.com• ACME wants its employees to seamlessly and securely

log into these external services• ACME’s security policy prohibits exchange of

passwords with external companies• ACME lacks resources and cost-effective

technology to build and maintain reliable SSO solution• ACME decides to leverage AssureBridge SSO

Exchange service and AD Gateway to connect to external services reliably and affordably


BEFORE SINGLE SIGN-ON

COMING SOON …

Demo


SINGLE SIGN-ON EXPERIENCE

COMING SOON …

Demo


assurebridge - company whose employees require sso into many externally hosted online services -...

Business

assurebridge sso solution

reliable internet sso

secure internet sso

saml sp step

reliable site step

soap service step

hosted service

support sso connections