Single Sign-On (SSO) Capabilities In Joget: OpenID Connect, SAML, Kerberos and More

By -
Single Sign-On (SSO) Capabilities In Joget: OpenID Connect, SAML, Kerberos and More

As a leading open source low-code application platform, Joget supports the most popular single sign-on (SSO) authentication standards such as OpenID Connect, SAML and Kerberos. This article is a brief introduction to SSO, its benefits and how it works.

What Is Single Sign-on (SSO)?
Single sign-on (SSO) is the ability for users to access multiple applications or systems by using a single login. Just like how Facebook, Google or Apple accounts are increasingly used to access many different consumer services, SSO in an enterprise environment is becoming a critical requirement.

Why Is SSO Important?
Reason #1 Security and Compliance
Increased digitalization and workflow process automation mean that organizations face a proliferation of new applications. The more apps and credentials there are, the higher the risk of security threats, phishing attempts and ransomware attacks. SSO reduces these security risks and helps with regulatory compliance around authentication and data access.

Reason #2 Simplified Identity Management and Reduced Cost
SSO streamlines the onboarding, separation and management of employee credentials in an organization, which in large enterprises incurs a significant cost in terms of IT resources and potential human errors. 

Reason #3 User Convenience and Usability
Remembering multiple credentials is becoming a real burden to users, and implementing SSO can save employee time resulting in increased productivity. Seamless access to applications also makes it more likely for users to readily adopt new applications and workflows.

How Is SSO Implemented?
An identity provider (IDP) is a solution that stores and manages user identities. The general SSO flow is such that a user authenticates against an identity provider, and receives a token or ticket in response. The token is then recognized by the application the user accesses, typically called a service provider (SP).

Over the past decades, on-premise solutions (often called user directory services) such as Microsoft Active Directory and OpenLDAP have been the core identity providers in enterprises, along with newer solutions like Red Hat SSO and its open source counterpart Keycloak. With the rise of cloud technology, Identity-as-a-Service (IDaaS) hosted solutions have emerged with platforms like Azure Active Directory, Google Cloud Identity, Amazon Cognito, Okta, OneLogin, and many others.

There are many authentication standards, and most identity providers support one of the popular standard authentication protocols:

#1 OpenID Connect
OpenID Connect (OIDC)

OpenID Connect (OIDC) is one of the latest and most popular authentication standards. Launched in 2014, it was originally based on the design of Facebook Connect and relies on the OAuth 2.0 protocol. OpenID Connect is supported by many identity providers including Google, Microsoft and Salesforce. OpenID Connect is different from the older OpenID 1.0 and OpenID 2.0 standards which are obsolete.

#2 SAML
Security Assertion Markup Language (SAML) is an XML-based authentication standard with widespread support. The latest version of the specification is SAML 2.0, and it is a mature technology that was introduced in 2005. Most identity providers, including Microsoft and Google, support SAML 2.0.

#3 Kerberos
Kerberos is a network authentication protocol for systems within the same network. Kerberos was created by the Massachusetts Institute of Technology (MIT), and is typically supported in operating systems. Microsoft has incorporated Kerberos as the default authentication method in Windows since Windows 2000, and it is an integral component of the Windows Active Directory service.

#4 LDAP
LDAP (Lightweight Directory Access Protocol) is a mature, open and cross platform protocol to access directory services. It is often used for authentication and storing information about users, groups and applications. Many directory servers support the LDAP protocol, including Microsoft Active Directory.

Supported SSO Standards in Joget DX
Joget supports the most popular single sign-on (SSO) authentication standards. The dynamic plugin architecture in Joget also allows custom SSO implementations to be developed when required. The following are the SSO related Joget Marketplace plugins, tutorials and knowledge base articles:

OpenID Connect
SAML
Kerberos
LDAP
Custom SSO Implementations

Get Started
Resources to get started developing low-code apps with Joget:

Follow us for the latest news and updates:

 

Comments

Post a Comment

Popular Posts

Cardano and Joget: Building No-Code, Composable Blockchain Apps

By -
Image
1. Introduction Joget is an open source low-code/no-code application platform for faster, simpler digital transformation. Previously, we have seen how we can integrate Hyperledger Fabric with Joget . So in this article, we will look at a no-code approach to integrate another popular blockchain technology, specifically the Cardano blockchain, into a full-fledged web application. 2. What is Cardano? Cardano is a third-generation, open source, decentralized proof-of-stake (PoS) public blockchain platform, that aims to be a decentralized application (DApp) development platform with a multi-asset ledger and smart contracts . It is also home for the cryptocurrency ADA. The blockchain operates on the Ouroboros proof-of-stake consensus protocol. Compared to first-generation proof-of-work mechanisms like Bitcoin, instead of relying on powerful machines solving complex cryptographic equations to achieve consensus and compete for block rewards, the proof-of stake mechanism relies on end users s
Read more

Transforming Customer Onboarding: How Allied Benefit Systems Achieved Reporting Accuracy and Streamlined Business Processes with No-code/Low-code.

By -
Image
To optimize business operations and ensure accurate reporting, Allied Benefit Systems empowered business users and delivered a Customer Onboarding Platform built on no-code/low-code within three months. Effective onboarding processes play a crucial role in creating a positive impression on new customers. Yet, many businesses still need to rely on manual methods that can be time-consuming, error-prone, and inefficient. Allied Benefit Systems (Allied) , a US-based healthcare solutions company that prioritizes people, understands the importance of streamlined onboarding. As the largest independent third-party administrator in the US, Allied designs tailored self-insurance benefits solutions that integrate innovative medical management and cost-control strategies.   The company collaborates with clients and benefits consultants to institute plans that support the best options for employees and their families. However, Allied's existing onboarding process was managed through spreadsheet
Read more

DISINI™ Vehicle Inspection & Insurance App

By -
Image
The DISINI™ Vehicle Inspection & Insurance App is an application that can be used standalone or in a composable application environment on the Joget DX low-code platform. Enterprises will be able to use the application to manage their fleet of vehicles, track insurance policies expiry and conduct regular vehicle inspections. Summary of the App features are: Track your vehicles' insurance policies and set email reminders of the renewals. Assign inspectors to conduct scheduled vehicle inspections. Supervisors will be able to set reminder notifications for the inspectors of upcoming vehicle inspections. Inspectors will be able to check their calendars for scheduled inspections that have been assigned to them. Create and manage inspection checklists templates for the many vehicle types. Inspectors will be able to update and check their Dashboard for inspection tasks. Supervisors will be able to keep track of all assigned inspection tasks and follow up accordingly. The following ar
Read more

Superapps in the Enterprise: Up, Up and Away!

By -
Image
 “We think these applications are so compelling that we don’t just call them apps, we call them super apps… Super apps are applications that once you start using them, you’ll wonder just how you lived without them” - BlackBerry founder Mike Lazaridis. What is a Superapp?  In the early days of the smartphone revolution, BlackBerry founder Mike Lazaridis first coined the term “super app” (or “superapp”) in a MWC 2010 keynote speech . He defined them as “a closed ecosystem of many apps that people would use every day because they offer such a seamless, integrated, contextualized and efficient experience.” According to Gartner®, “a superapp is like a Swiss army knife with a range of component tools (miniapps) that the user can use and remove as needed”.  We consider superapps to be a single platform where miniapps are integrated, thus providing a seamless experience to its users. Here are some statistics and predictions from 2022 Gartner Top Strategic Technology Trends for 2023: Superapps
Read more

Blockchain 101: Understanding the Building Blocks of Blockchain Technology

By -
Image
Blockchain technology is one of the most talked about and rapidly growing areas of technology today. It is built on a number of key elements, each of which plays a crucial role in the functioning of the system. In this blog post, we will demystify and break down some of the key ingredients of blockchain technology and explain the inner workings of this revolutionary new wave. 1. Introducing Blockchain, Cryptocurrency, Coins, Fungible and Non-Fungible Tokens Blockchain: as an overview, blockchain technology is a decentralized digital ledger that is used to record transactions across a network of computers. Its decentralized nature makes it resistant to tampering and modification, creating a transparent infrastructure for users to store and transfer their digital assets.  Cryptocurrency: (as a broader term) is a digital virtual currency that is secured by cryptography as a means of securing communications and using key-pairs as a provable identity, to execute transactions on the blockch
Read more