Versions Compared
Version | Old Version 12 | New Version Current |
---|---|---|
Changes made by | ||
Saved on |
Key
- This line was added.
- This line was removed.
- Formatting was changed.
For most many implementations, single sign-on is not necessary because CloudCard's secure login links provide excellent security with the least possible minimal user friction, which increases user adoption. However, there are many numerous use cases for which where SSO improves the user experience .For our A+ customerswhile offering a scalable provisioning strategy.
As an implementation add-on, CloudCard can deploy an integrate our SSO Connector in our Cloud for any SAML2 identity providers which includes provider (including CAS, Shibboleth, and ADFS).
Process:
- Install the metadata for our test SSO connector on your IdP (preferably your test IDP if available).
- Create a test login account for CloudCard Support
- Securely communicate the following to CloudCard Support
- authentication credentials for the test login account
- the SAML attribute mapping names for:
- email address
- ID number *(generally an immutable identifier)
- any custom fields if you want to provision or update users via SSO
- CloudCard will configure the test SSO connector by installing your metadata on our system and then test the configuration.
- If applicable, CloudCard will request the creation the CNAME record that will point to the production SSO connectorthe test is successful, we will switch over to production.
- Install our production metadata in your production IdP.
- CloudCard will deploy your production SSO connector.Install the production metadata in you production IdP.
- CloudCard will conduct final testing and configuration.
Simplified SSO Integration Diagram
Image Removed
DIY SSO:
Because CloudCard uses a stateless, token-based authentication protocol, implementing SSO on premises is relatively trivial. For an example, check out the cloudcard-auth-csharp GitHub project. This command line project demonstrates how to consume the necessary API endpoints to retrieve auto-login links on a secured web page, so authenticated users on your site will automatically be logged into Online Photo Submission when they click the login link. This project also demonstrates how to create/update users if necessary- .