AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM...
-
date post
19-Dec-2015 -
Category
Documents
-
view
216 -
download
0
Transcript of AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM...
![Page 1: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/1.jpg)
AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard
Building BlockTM
Richesh Ruchir, Technical Manager [email protected]
![Page 2: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/2.jpg)
A Reference Implementation of a Secure Single Signon Blackboard Building Block™
• Introduction
• Single Sign-On
• Blackboard® Authentication Framework
• Introduction to AutoSignon
• Implementation Details
• Demo Application
• Open Source Project
• Q & A
![Page 3: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/3.jpg)
Single Sign-On
• Identity management is an emerging challenge at many institutions
• Existing institutional solutions
– CAS, Shibboleth
• Industry standards tackling authentication / authorization
– OpenID, Basic Learning Tools Interoperability/LTI
• Not all institutions are prepared to invest in complex solutions
• Smaller institutions may not have a need
![Page 4: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/4.jpg)
Blackboard® Authentication Framework
• LDAP
• Internal database
• Custom authentication mechanism
– Built by clients and by Blackboard Consulting Services(sm)
– Support for CAS, Shibboleth, and others
![Page 5: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/5.jpg)
Introduction to AutoSignon
• Allows users who are authenticated by a trusted system to access the Blackboard platform without needing to log in again (Inbound SSO)
• Based on the WebCT CE/Vista Automatic Signon Protocol
• Uses a MAC (Message Authentication Code) generated by request parameters and shared secret to validate incoming SSO requests before processing
![Page 6: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/6.jpg)
AutoSignon Workflow
![Page 7: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/7.jpg)
Implementation Details
![Page 8: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/8.jpg)
Implementation Details (Contd.)
![Page 9: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/9.jpg)
Admin Settings
![Page 10: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/10.jpg)
Demo Application
• Reference implementation application
![Page 11: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/11.jpg)
Open Source Project
• Available at http://projects.oscelot.org/gf/project/autosignon/
![Page 12: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/12.jpg)
Q & As
?
![Page 13: AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard Building Block TM Richesh Ruchir, Technical Manager richesh.ruchir@blackboard.com.](https://reader036.fdocuments.in/reader036/viewer/2022062516/56649d385503460f94a11d43/html5/thumbnails/13.jpg)
Please provide feedback for this session by emailing [email protected].
The subject of the email should be title of this session:
AutoSignon - A Reference Implementation of a Secure Single Sign-On Blackboard
Building BlockTM