Single Sign-On (SSO) Capabilities In Joget: OpenID Connect, SAML, Kerberos and More

By -
Single Sign-On (SSO) Capabilities In Joget: OpenID Connect, SAML, Kerberos and More

As a leading open source low-code application platform, Joget supports the most popular single sign-on (SSO) authentication standards such as OpenID Connect, SAML and Kerberos. This article is a brief introduction to SSO, its benefits and how it works.

What Is Single Sign-on (SSO)?
Single sign-on (SSO) is the ability for users to access multiple applications or systems by using a single login. Just like how Facebook, Google or Apple accounts are increasingly used to access many different consumer services, SSO in an enterprise environment is becoming a critical requirement.

Why Is SSO Important?
Reason #1 Security and Compliance
Increased digitalization and workflow process automation mean that organizations face a proliferation of new applications. The more apps and credentials there are, the higher the risk of security threats, phishing attempts and ransomware attacks. SSO reduces these security risks and helps with regulatory compliance around authentication and data access.

Reason #2 Simplified Identity Management and Reduced Cost
SSO streamlines the onboarding, separation and management of employee credentials in an organization, which in large enterprises incurs a significant cost in terms of IT resources and potential human errors. 

Reason #3 User Convenience and Usability
Remembering multiple credentials is becoming a real burden to users, and implementing SSO can save employee time resulting in increased productivity. Seamless access to applications also makes it more likely for users to readily adopt new applications and workflows.

How Is SSO Implemented?
An identity provider (IDP) is a solution that stores and manages user identities. The general SSO flow is such that a user authenticates against an identity provider, and receives a token or ticket in response. The token is then recognized by the application the user accesses, typically called a service provider (SP).

Over the past decades, on-premise solutions (often called user directory services) such as Microsoft Active Directory and OpenLDAP have been the core identity providers in enterprises, along with newer solutions like Red Hat SSO and its open source counterpart Keycloak. With the rise of cloud technology, Identity-as-a-Service (IDaaS) hosted solutions have emerged with platforms like Azure Active Directory, Google Cloud Identity, Amazon Cognito, Okta, OneLogin, and many others.

There are many authentication standards, and most identity providers support one of the popular standard authentication protocols:

#1 OpenID Connect
OpenID Connect (OIDC)

OpenID Connect (OIDC) is one of the latest and most popular authentication standards. Launched in 2014, it was originally based on the design of Facebook Connect and relies on the OAuth 2.0 protocol. OpenID Connect is supported by many identity providers including Google, Microsoft and Salesforce. OpenID Connect is different from the older OpenID 1.0 and OpenID 2.0 standards which are obsolete.

#2 SAML
Security Assertion Markup Language (SAML) is an XML-based authentication standard with widespread support. The latest version of the specification is SAML 2.0, and it is a mature technology that was introduced in 2005. Most identity providers, including Microsoft and Google, support SAML 2.0.

#3 Kerberos
Kerberos is a network authentication protocol for systems within the same network. Kerberos was created by the Massachusetts Institute of Technology (MIT), and is typically supported in operating systems. Microsoft has incorporated Kerberos as the default authentication method in Windows since Windows 2000, and it is an integral component of the Windows Active Directory service.

#4 LDAP
LDAP (Lightweight Directory Access Protocol) is a mature, open and cross platform protocol to access directory services. It is often used for authentication and storing information about users, groups and applications. Many directory servers support the LDAP protocol, including Microsoft Active Directory.

Supported SSO Standards in Joget DX
Joget supports the most popular single sign-on (SSO) authentication standards. The dynamic plugin architecture in Joget also allows custom SSO implementations to be developed when required. The following are the SSO related Joget Marketplace plugins, tutorials and knowledge base articles:

OpenID Connect
SAML
Kerberos
LDAP
Custom SSO Implementations

Get Started
Resources to get started developing low-code apps with Joget:

Follow us for the latest news and updates:

 

Comments

Post a Comment

Popular Posts

Security in Low-Code Applications: Cybersecurity Features and Best Practices for the Joget Open Source Platform

By -
Image
Introduction to Security Benefits and Risks in Low-Code Platforms As digitalization becomes increasingly prevalent, low-code platforms are rapidly gaining adoption across industries. Employing visual techniques to programming, they enable the development and delivery of applications in a fraction of the time required by traditional coding. According to Forrester’s Now Tech: General-Purpose Low-Code Development Platforms, Q1 2021 , low-code platforms are “vital to digital business” and “proven in even the most mission-critical use cases”. However, the proliferation of apps and digital solutions bring with it increased cybersecurity risks like phishing attempts and ransomware attacks. As the SolarWinds hack in 2020 and Microsoft Exchange hack in 2021 demonstrated, the cost of security lapses can be monumental. Security considerations are therefore paramount, so how would they apply to low-code platforms? Source:  Don’t Ignore Security In Low-Code Development, Forrester Research Inc...
Read more

No-Code, Low-Code and Pro-Code: Why Flexibility is Essential for Digital Transformation

By -
Image
Introducing Business Reporting and API Management Addons for Joget DX The COVID-19 coronavirus pandemic will be viewed in history as a significant point in human history. In the post-pandemic world, digital transformation can no longer be delayed and organizations need to adapt quickly, or perish, as the old ways of working no longer apply in the new normal. Based on Forrester’s Q1 2020 Digital Process Automation Survey , over 70% Of organizations still have paper-based process dependencies, as shown in the figure below. With a modern open source no-code/low-code platform like Joget DX , organizations can rapidly build, deploy and adapt applications to cater to ever changing needs. In this article, we will talk about the need for flexibility in application platforms to meet digitalization needs, and how the extensibility of Joget DX enabled the introduction of new add-ons for business reporting and API management . No-Code, Low-Code and Pro-Code: Flexibility and Extensibility There mi...
Read more

Transforming Customer Onboarding: How Allied Benefit Systems Achieved Reporting Accuracy and Streamlined Business Processes with No-code/Low-code.

By -
Image
To optimize business operations and ensure accurate reporting, Allied Benefit Systems empowered business users and delivered a Customer Onboarding Platform built on no-code/low-code within three months. Effective onboarding processes play a crucial role in creating a positive impression on new customers. Yet, many businesses still need to rely on manual methods that can be time-consuming, error-prone, and inefficient. Allied Benefit Systems (Allied) , a US-based healthcare solutions company that prioritizes people, understands the importance of streamlined onboarding. As the largest independent third-party administrator in the US, Allied designs tailored self-insurance benefits solutions that integrate innovative medical management and cost-control strategies.   The company collaborates with clients and benefits consultants to institute plans that support the best options for employees and their families. However, Allied's existing onboarding process was managed through spreadsheet...
Read more

Superapps in the Enterprise: Up, Up and Away!

By -
Image
 “We think these applications are so compelling that we don’t just call them apps, we call them super apps… Super apps are applications that once you start using them, you’ll wonder just how you lived without them” - BlackBerry founder Mike Lazaridis. What is a Superapp?  In the early days of the smartphone revolution, BlackBerry founder Mike Lazaridis first coined the term “super app” (or “superapp”) in a MWC 2010 keynote speech . He defined them as “a closed ecosystem of many apps that people would use every day because they offer such a seamless, integrated, contextualized and efficient experience.” According to Gartner®, “a superapp is like a Swiss army knife with a range of component tools (miniapps) that the user can use and remove as needed”.  We consider superapps to be a single platform where miniapps are integrated, thus providing a seamless experience to its users. Here are some statistics and predictions from 2022 Gartner Top Strategic Technology Trends for 2...
Read more

DISINI™ Vehicle Inspection & Insurance App

By -
Image
The DISINI™ Vehicle Inspection & Insurance App is an application that can be used standalone or in a composable application environment on the Joget DX low-code platform. Enterprises will be able to use the application to manage their fleet of vehicles, track insurance policies expiry and conduct regular vehicle inspections. Summary of the App features are: Track your vehicles' insurance policies and set email reminders of the renewals. Assign inspectors to conduct scheduled vehicle inspections. Supervisors will be able to set reminder notifications for the inspectors of upcoming vehicle inspections. Inspectors will be able to check their calendars for scheduled inspections that have been assigned to them. Create and manage inspection checklists templates for the many vehicle types. Inspectors will be able to update and check their Dashboard for inspection tasks. Supervisors will be able to keep track of all assigned inspection tasks and follow up accordingly. The following ar...
Read more