KNF:Single Sign On query/en

Uit Kennisnet Developers Documentatie
Naar navigatie springen Naar zoeken springen

KNF-symbol.png Kennisnet Federation: Single Sign On query

Nl.gif Nederlands En.gif English


The main reason to perform a Single Sign On query is the following scenario:

A user enters a website that has functionality for both anonymous and authenticated users.

  • For anonymous users, only limited functionality and information is available
  • When the user wants access to other functionality and information, he needs to be authenticated

To authenticate, the user needs to press the “Log in” button on the website, which starts authentication process. If the user already has a valid Single Sign On session with Entree, pressing the “Log in” button immediately logs on the user, without interaction. The requirement to press “Log in” is therefore unnecessary and not user friendly.

To prevent this the website should have a detection mechanism in place which automatically recognizes a user with a valid SSO session. This can be achieved with the Single Sign On query. This method is preferred over the 'SAML passive authentication' When using the SSO query, SAML passive authentication is not needed.

External links

Technical documentation