KNF:Single Sign On query/en: verschil tussen versies
Geen bewerkingssamenvatting |
|||
| Regel 1: | Regel 1: | ||
{{PageTitleCustom|title=Single Sign On query|name=Kennisnet Federation|image=true|imageurl=KNF:Hoofdpagina/en}} | {{PageTitleCustom|title=Single Sign On query|name=Kennisnet Federation|image=true|imageurl=KNF:Hoofdpagina/en}} | ||
==Introduction== | ==Introduction== | ||
The | The Single Sign ON query can be used on websites that allows both anonymous and authenticated users. The latter will have access to extended functionality or content. | ||
To authenticate, the user needs to press the “Log in” button on the website, which starts authentication process. However if the user already has a valid Single Sign On session with Entree, pressing the “Log in” button immediately logs on the user, without any further interaction (eg.entering a username and password). The requirement to press “Log in” is therefore unnecessary and not user friendly. | |||
To authenticate, the user needs to press the “Log in” button on the website, which starts authentication process. | |||
To prevent this scenario the website should have a detection mechanism in place which automatically recognizes a user with a valid SSO session. This can be achieved with the Single Sign On query. This method is preferred over the 'SAML passive authentication' When using the SSO query, SAML passive authentication is not needed. | |||
==External links== | ==External links== | ||
[https://docs.google.com/document/d/15Ng2VfA-rJf1GXTxO45niwwgNAA0LszLsTg-cPsvoBQ/edit?pli=1# Technical documentation] | [https://docs.google.com/document/d/15Ng2VfA-rJf1GXTxO45niwwgNAA0LszLsTg-cPsvoBQ/edit?pli=1# Technical documentation] | ||
Versie van 17 dec 2013 12:42
Kennisnet Federation: Single Sign On query
 Nederlands
|
 English
|
Introduction
The Single Sign ON query can be used on websites that allows both anonymous and authenticated users. The latter will have access to extended functionality or content.
To authenticate, the user needs to press the “Log in” button on the website, which starts authentication process. However if the user already has a valid Single Sign On session with Entree, pressing the “Log in” button immediately logs on the user, without any further interaction (eg.entering a username and password). The requirement to press “Log in” is therefore unnecessary and not user friendly.
To prevent this scenario the website should have a detection mechanism in place which automatically recognizes a user with a valid SSO session. This can be achieved with the Single Sign On query. This method is preferred over the 'SAML passive authentication' When using the SSO query, SAML passive authentication is not needed.