Single Sign-On

Single sign-on (SSO) is a specialized form of authentication that enables a user to authenticate once and gain access to the resources of multiple software systems. OrgPlus Enterprise can be configured to support single sign-on when launched or embedded in another web application.

Before deploying OrgPlus Enterprise, you must determine the method that will be used for SSO. The method is typically determined by the web application that launches OrgPlus Enterprise (e.g., SAP Enterprise Portal, Oracle Portal, or PeopleSoft Portal).

Note: HumanConcepts can build custom SSO adapters if you are using proprietary SSO mechanisms or have deployed mechanisms that are not currently supported in OrgPlus Enterprise. Contact sales@humanconcepts.com for more information.

You can configure SSO in the following ways:

Authentication and authorization determined by SSO Adapter

Credentials passed from calling system contain both authentication and authorization information.

Different systems used for authentication and authorization

SSO Authorization and SSO Authentication adapters are separate.

SSO adapter used for authentication; role determined from underlying data source

The role is determined by applying a role rule to the data record that corresponds to the current user. A role rule is attached to a specific data source and consists of one or more conditions. For example, a field within a data source specifies a user as an HR administrator.

SSO adapter used for authentication; shadow user accounts determine role

Occasionally, the role for a specific user cannot be determined from a data source (Role determined from underlying data source) or an external system. In this case, the role for a user can be determined using the role assigned to an OrgPlus Enterprise shadow user account. See Internal User Accounts.

To configure Single Sign-On:

1 Sign in to the Administrative Interface (see Administrative Login).

2 In the OrgPlus Enterprise Admin Explorer, click Security | Access to display the Security Access page.

Note: Single sign-on authorization is available only in the External Security access mode, which is the default setting in the Access page.

3 Select the adapter to be used for SSO.

4 Click the button to enter setup parameters as necessary.

5 Click the Update button.

Note: The parameters vary for each SSO adapter. For information on how to configure a specific adapter, please visit the OrgPlus Enterprise Knowledge Base at www.orgplus.com/support/ope/.