AssureBridge - Company Whose Employees Require SSO into Many Externally Hosted Online Services -...
-
Upload
oleg-cohen -
Category
Business
-
view
525 -
download
1
description
Transcript of AssureBridge - Company Whose Employees Require SSO into Many Externally Hosted Online Services -...
Page 1
Oleg Cohen
AssureBridgeB2B Single Sign-On (SSO) Made Easy
ACME Needs SSO Integration Assistance
ACME Intranet
ACME Employee
Page 2
AGENDA
Business Problem
What is AssureBridge
Value Proposition
Demo
AssureBridge Difference
Page 3
Business Problem –Your employees connect to many externally hosted online services
ACME Needs SSO Integration Assistance
ACME Intranet
ACME Employee
Page 4
Customer Need
BUSINESS DRIVER:
Allow employees to use a single corporate user name and password to securely access many hosted online services
CUSTOMER PAINS: Employee frustration managing many IDs and passwords ID and password proliferation increases risk of breach Costly to comply with employee termination policies High costs and security risks of custom SSO solutions
CUSTOMER NEED:Implement and support SSO connections with multiple online companies
Partner 2Partner 2
Your Corporate Intranet Partner 2Hosted
Service
Page 5
AssureBridge Offering – SSO Exchange
Fully-Managed Hosted Single Sign-On ServiceFully-Managed Hosted Single Sign-On Service
Seamlessly logs employees into hosted online services
Connects to corporate directory Passwords never leave the company
Provides professional setup, configuration,troubleshooting, and monitoring
by AssureBridge experts
Page 6
Our customers:
Value Proposition – Consistent DeliveryO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
• Painlessly integrate with multiple online services
Page 7
Our customers:
Value Proposition – ExpertiseO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
• Painlessly integrate with multiple online services
Are shielded from implementing and maintaining complex Single Sign-on products
Page 8
Value Proposition – SupportO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
Our customers:
Are shielded from implementing and maintaining complex Single Sign-on products
• Painlessly integrate with multiple online services
Leverage fault-tolerant infrastructure and expert support to maximize service uptime
Page 9
Value Proposition – Cost SavingsO
UR
ST
RE
NG
TH
S
Fastest Implementation
Va
lue
Pro
po
sit
ion
Customer Satisfaction
Reliable Hosting
Expertise
Our customers:
No longer required to invest into hiring and retaining expensive and hard-to-find experts
• Painlessly integrate with multiple service partners
Leverage fault-tolerant infrastructure and expert support to maximize service uptime
Benefit from timely Internet SSO solution with lowest
support costs
Page 10
AssureBridge Positioning
For corporations whose employees connect to multiple online services
For corporations whose employees connect to multiple online services
SSO Exchange is an affordable full-service hosted solution
that delivers the most reliable standards-compliantSSO functionality with the least amount of effort
SSO Exchange is an affordable full-service hosted solution
that delivers the most reliable standards-compliantSSO functionality with the least amount of effort
To enable high level of employee satisfaction and maximum safety of employee account information
To enable high level of employee satisfaction and maximum safety of employee account information
Page 11
DEMO*AssureBridge SSO Solution
* Demo Screenshots are coming soon …
Page 12
Secure Internet SSO is Highly Complex
Speedy Rent-A-Car Domain (https://www.speedyrental.com)
Reliable Insurance Domain (https://www.reliableinsurance.com)
IDM
Speedy Rentals Secure Partner Site
SAML Identity Provider (IDP)
Reliable Insurance
SAML Service Provider (SP)
Customer
Link to Rent a Car
Step 1a: User logs into Reliable Site Step 1b: User Clicks on Rent-A-Car Site Link
Step 2a: Portal Sends Request to IDP Step 2b: IDP gets attributes, builds SAML Assertion , signs with a Partner A’s Private Key
1
2
3
4
7
8
Custom SSO Plug-in
Application Component
9
5
6
Step 3: IDP Redirects to Browser with a SAML artifact token
Step 4: User Browser redirects artifact token to SAML SP
Step 5: SP requests SAML assertion via a SOAP service
Step 6: IDP returns SAML assertion via a SOAP service
Step 7a: SP validates SAML Assertion Cryptographic signatureStep 7b: SP send s browser secure SAML token with encrypted user attributes
UserStore
UserStore
Step 8: Browser redirect User to Speedy Rental site with secure SAML token in request
Step 9: Decodes the token, extracts user info and binds into Portal session context.
Internet SSO in
volves
many complex
interactions among
multiple partie
s
Secure and reliable Internet SSO involves many complex interactions among multiple
distributed parties. AssureBridge shields your IT staff from these complexities.
Secure and reliable Internet SSO involves many complex interactions among multiple
distributed parties. AssureBridge shields your IT staff from these complexities.
Page 13
Key SSO Challenges
Expertise True experts
are hard to find Knowledge gaps
are risky
Expertise True experts
are hard to find Knowledge gaps
are risky
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Page 14
Key SSO Challenges – Expertise
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Expertise True experts
are hard to find Knowledge gaps
are risky
Expertise True experts
are hard to find Knowledge gaps
are risky
Page 15
AssureBridge Solution – Expertise
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Page 16
Key SSO Challenges – Time-To-Market
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Time-To-Market Build, implement,
and integrate Negotiate and coordinate with
service providers
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Page 17
AssureBridge Solution – Time-To-Market
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Page 18
Key SSO Challenges – Security
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Security Potential legal
and audit exposure
Data privacy protection issues
Security Potential legal
and audit exposure
Data privacy protection issues
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Page 19
AssureBridge Solution – Security
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Operations SSO issues =
relationship problems
SSO issues require complex troubleshooting
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employee dissatisfaction
SSO issues require complex troubleshooting
Page 20
Key SSO Challenges – Operations
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Operations SSO issues =
employeedissatisfaction
SSO issues require complex troubleshooting
Page 21
AssureBridge Solution – Operations
Expertise SSO protocol
configuration Corporate directory
integration
Expertise SSO protocol
configuration Corporate directory
integration
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Time-To-Market Rapid
provisioning Turnkey SSO gateway Integration test harness
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Security Leverages
industry standards
Secure multi-tenant platform Fully auditable system
Operations 24x7 support Robust enterprise-
class platform Early warning system Triage
Operations 24x7 support Robust enterprise-
class platform Early warning system Triage
Page 22
Summary
AssureBridge rapidly delivers reliable SSO empowering you to:AssureBridge rapidly delivers reliable SSO empowering you to:
Quickly connect with online services
Support many SSO integrations without draining staff
Provide your employees with rock-solid solution
Avoid an expensive product purchase and installation
Page 23
For more information please visit our Web Site at
http://www.assurebridge.com
and contact
Oleg CohenAssureBridge, Inc.
888-409-6995
617-455-7927
Page 24
APPENDIX
Page 25
How we solve the problemWithout AssureBridge
YouYou Your Online ServiceYour Online Service
Your Portal
Commercial SSO Product ($$
$)
Service Web Application
Integration ($$)
SSO Infrastructure + Operations ($$)
Page 26
How we solve the problemUsing AssureBridge Services
Partner APartner A Partner BPartner B
Web Site A
SSO Exchange: Hosted AssureBridge SSO Services Robust & Reliable Infrastructure World-Class Operations
Web Site B
Integration ($)
($)
Page 27
DEMOAssureBridge SSO Solution for Speedy Rental
Page 28
Business Case• ACME is a successful mid-size manufacturing firm• ACME uses a number of online applications including
CA Clarity, Saleforce.com, Service-Now.com• ACME wants its employees to seamlessly and securely
log into these external services• ACME’s security policy prohibits exchange of
passwords with external companies• ACME lacks resources and cost-effective
technology to build and maintain reliable SSO solution• ACME decides to leverage AssureBridge SSO
Exchange service and AD Gateway to connect to external services reliably and affordably
Page 29
BEFORE SINGLE SIGN-ON
COMING SOON …
Demo
Page 30
SINGLE SIGN-ON EXPERIENCE
COMING SOON …
Demo