Nuances of Certificates in Domain Matching for SAML Based Single Sign On

https://hackernoon.imgix.net/images/2jqChkrv03exBUgkLrDzIbfM99q2-rn822n5.jpeg

Introduction

This topic may sound a bit niche but actually has very broad applicability in web based platforms for single sign on (SSO). To start with, let’s set the context with some basics. First, single sign on - this is a technique that allows a user to navigate from one website to another website without being asked to provide credentials again. As an example, a student signs in to a university portal and then opens externally hosted services such as Canvas to work on their assignment without being asked to enter separate credentials for Canvas. In order for the SSO solution to work between two websites, some level of trust needs to be established between the two website platforms. There are two industry standard protocols available to establish this trust - Simple Assertion Markup Language (SAML) and OpenID Connect (OIDC) with SAML being the more traditional and older protocol. Establishing...

Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE