RE: Credentials for Application use

[ljknews <ljknews () mac com>]

At 11:00 AM -0500 5/11/05, Gizmo wrote:
> Maybe I don't fully understand the concept of Single Sign-On.
>
> As I understand it, SSO allows a user to login to an application portal, and
> all of the applications that user accesses via that portal know who the user
> is and what rights they have within their respective application realms.  As
> such, it is a front-end technology; the back-end applications don't know
> anything about this.

That is _one_ (relatively insecure) method of implementing single sign-on.

The general definition of single sign-on is that a user only logs on once
to access a variety of computer applications.

For some applications, relying entirely on Microsoft's credentials is
adequate.

For some applications, relying on the TSO login is adequate.

For some applications, relying on Kerberos credentials is adequate.

etc.
-- 
Larry Kilgallen