C H A P T E R 8
Single Sign-On
Single sign-on (SSO) is a relatively simple concept. Did you log in when you turned on your computer, before you were able to start working? If so, then we ought to be able to find out who you logged in as and assume that your identity is the same when you use our applications.
Part of the mystery here revolves around assurance and trust. Can I trust that initial log in to be secure enough so that only the actual user can authenticate as himself? Can I be sure that no one else has that username and password, and that no one can pretend to be that user (spoof the user)? This assurance comes not only from the power of the encryption and the strength of the password storage protection, but also from the computer ...
Get Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
