Nuances of Certificates in Domain Matching for SAML Based Single Sign On

https://hackernoon.imgix.net/images/2jqChkrv03exBUgkLrDzIbfM99q2-rn822n5.jpeg

Introduction

This topic may sound a bit niche but actually has very broad applicability in web based platforms for single sign on (SSO). To start with, let’s set the context with some basics. First, single sign on - this is a technique that allows a user to navigate from one website to another website without being asked to provide credentials again. As an example, a student signs in to a university portal and then opens externally hosted services such as Canvas to work on their assignment without being asked to enter separate credentials for Canvas. In order for the SSO solution to work between two websites, some level of trust needs to be established between the two website platforms. There are two industry standard protocols available to establish this trust - Simple Assertion Markup Language (SAML) and OpenID Connect (OIDC) with SAML being the more traditional and older protocol. Establishing...

Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/MB6pJa8ZzL8fom8JKMHzwV-1590-80.jpg

Quote of the day by Motorola's cell phone pioneer Martin Cooper: 'People want to talk to other people — not a house, or an office, or a car' — blueprinting the start of a new era of communications

The American engineer Mark Cooper is considered one of the leading pioneers of the wireless communications industry, envisioning a world in which people would communicate wherever they were and not from fixed locations. Without his work in the mid-20th century, the mobile communications industry would arguably be non-existent. Hello Moto