Integrating Single Sign-on Across the Cloud

Single sign-on (SSO) isn't something new: we have had various prod­ucts for more than a decade to manage a proliferation of passwords and security profiles. Indeed, many of us make use of Microsoft's Active Directory to provide SSO within the enterprise network. What is new is the explosion of Web-based software-as-a-service (SaaS) business applications and access to them from external company partners. Both of these things have made the SSO problem more complex and a lot harder to implement, since the identity boundary needs to be extended to third-party applications and users. This white paper, provided by McAfee, identifies the issues associated with access control and it offers some advice on best practices for single sign-on for SaaS applications.