Single Sign-on

An important part of the authentication process is the initialization of the Single Sign-on (SSO) session. SSO allows users to skip authentication if they already successfully authenticated earlier, and a service provider requires the user to authenticate.

Flow

The SSO component is called after authentication was successfully finished. The session information of the user is stored persistently and the resulting identifier is set in a cookie that is sent to the user.

The next time the user accesses the WebSSO component for an authentication request, the identifier is sent with the request. The ID is used to retrieve the session information (See AuthenticationMethods).