Closing the security holes and keeping up with access changes for the services on and off premises is quite a challenge. Shibboleth offers a way for users to access multiple services with a federated Single Sign-On framework, across or within institutional and organizational boundaries.
Whatever the goal of Shibboleth deployment, whether a client decides to host on-premises or in the cloud, OculusIT provides the expertise required to give the confidence that comes with a professional implementation.
At its core, Shibboleth works the same as every other web-based Single Sign-on system. What distinguishes Shibboleth from other products in this field is its adherence to standards and its ability to provide SSO support to services outside a user’s organization while still protecting their privacy.
The main elements of a web-based SSO system are:
- Web Browser – represents the user within the SSO process
- Resource – contains restricted access content that the user wants
- Identity Provider (IdP) – authenticates the user
- Service Provider (SP) – performs the SSO process for the resource
Shibboleth, a federated web Single Sign-On, helps institutions share resources and collaborate in a privacy preserving manner, across or within organizational boundaries. OculusIT offers consulting services for adopting the Shibboleth federated Single Sign-On authentication service. OculusIT’s services team supplies the expert guidance, execution, and development necessary to meet the specific needs of the institution or organization, maximizing the results in adopting Shibboleth.
OculusIT’s evaluation service includes surveys, reporting, and analysis, all helping institutions and organizations decide their business needs which came post an evaluation session that determines and prioritizes the conditions required for a new implementation, update or customization to an existing Shibboleth instance. OculusIT also provides best practices for evaluation based on functionality, finances, support/maintenance, performance, usability, and security.
General Shibboleth mentorship provides institutions and organizations access to a OculusIT developer/consultant experienced in working with Shibboleth. Consultants are made available to assist and mentor staff.
An enterprise web Single Sign-On solution is only valuable when applications make use of it, so OculusIT offers a systems integration service to assist with conversion of applications to use Shibboleth for authentication.