Talk:Single sign-on

message: The current version of the article says that "Single sign-off is the reverse property whereby a single action of signing out terminates access to multiple software systems". I think that describing single sign off as the reverse of SSO is not accurate. The reverse would be something like prompting for a username/pwd each time a user accesses a new system in the environment. Opinions?? --Eyad  — Preceding unsigned comment added by 217.165.19.30 (talk) 06:37, 28 December 2011 (UTC)
thread_title: Single sign on vs. single sign off

message: "Can support conventional authentication such as Windows credentials (i.e., username/password)" The wording of this statement needs improvement, that statement doesn't demonstrate any kind of any additional benefit from SSO that isn't already covered more generally in that list. I could go further to say, if it's not a given, how is it even relevant? Perhaps it should go in a hypothetical use case list.--58.96.105.16 (talk) 14:23, 14 July 2010 (UTC)
thread_title: Possible conventional authentication support

message: In the ESSO section, it seems incorrect to say "significant security upside with client side ESSO solutions" and much like a brochure.  In practice, SSO benefits the usability of systems, but does not add to any security.  In many cases, this can be detrimental.   —Preceding unsigned comment added by 74.140.173.132 (talk) 01:12, 20 October 2009 (UTC)
thread_title: ESSO Security Benefits?

message: Could someone provide justification for use of the em dash in this term?
More common usage seems to be without it ("Single Sign On").  The SNIA
Dictionary is going to go without it in the absence of a strong argument
for it.  Alan Alanyoder (talk) 19:21, 30 May 2008 (UTC)
thread_title: Use of the em dash

message: With respect to merger proposal from Aug. 2007: No discussion seems to have taken place. My vote: MERGE. Vigilius (talk) 21:25, 8 April 2008 (UTC)
replies: text: Looks like someone already had it merged.  I redirected ESSO to this article and removed the tags. Jauerbackdude?/dude. 13:12, 1 July 2008 (UTC)
thread_title: Merging with Enterprise Single Sign-on

message: (diff: ) I removed a series of edits which appeared to be advertising; the subject of the edits did not return any relevant Google hits and did not appear to be a highly notable service. If you are the user to made these changes, I apologize for the intrusion and encourage you to see WP:WEB, WP:NOT, WP:AUTO, and WP:SPAM. Especially if I have made these reversion in error, you have my most sincere apologies. If you wish to replace these edits, please offer your reasoning here. Luna Santin 08:46, 16 June 2006 (UTC)
thread_title:  Reversion as of June 16, 2006 

message: Was OpenID overlooked or is there a reason for it not appearing on this page? Pyroman 15:26, 9 August 2007 (UTC)
replies: text: OpenID  is an authentication framework while this page speaks of SSO as an access control mechanism in the first paragraph. We can comment somewhere in the Criticism section that SSO is a misnomer, though. Sam lowry2002 (talk) 09:44, 21 April 2010 (UTC)
thread_title:  OpenID 

message: I removed the section on Enterprise Service-Oriented Architecture. That's just SAP's name for SOA. Many of the statements were forward looking: "will have an impact on", "likely that future SSO solutions", etc. Here is the text I removed:
:Single Sign-On for Enterprise Service-Oriented Architecture
:Enterprise Service-Oriented Architecture, also known as E-SOA (also see Service-Oriented Architecture), will have an impact on authentication technologies and architectures. It is likely that future SSO solutions will evolve according to new customer needs in real-life E-SOA environments. Furthermore, there is a growing concern over the applicability of current SSO solutions for E-SOA platforms provided by SAP or Oracle Corporation. There are new developments in SSO technology designed to offer "E-SOA compatibility."
:Client Certification-based SSO in E-SOA
:Client certificates is an authentication method that supports a secure single sign-on to some ERP E-SOA based platforms (e.g., SAP)
:Kerberos-based SSO in E-SOA
:Some E-SOA platforms will not be compatible with Kerberos-based SSO. SAP E-SOA is one example.
:Supported SSO Mechanisms for SAP E-SOA
::1) Username / password
::2) Client Certificates
::3) SAP Logon Tickets
::4) SAML (combining SAML and Kerberos not planned)
Maybe this wants to go in the SAP article? --Ishi Gustaedr (talk) 21:01, 10 July 2008 (UTC)
thread_title:  Enterprise service-oriented architecture 

message: The article contains the claim "Shared authentication schemes like OpenID, which require additional sign-on for each web site, are also not single sign on".
First of all, OpenID would not generally be considered a shared authentication scheme.  When you use an OpenID to log in to a relying party, the relying party doesn't directly authenticate the user: instead it asks the OpenID provider whether the user is authenticated.  The relying party never has enough information to independently identify the user, which is the usual case for shared authentication.
While not required by the spec, most OpenID providers only require the user to authenticate once during a session (e.g. using session cookies or relying on SSL client certificates that the user unlocks once).  So in most cases, the user only signs on a single time.
Lastly, it is quite easy to build a traditional closed SSO system with a central authentication server using OpenID 2.0's directed identity mode.  This could either be a company provider for intranet apps, or as a way to rely on Google's or Yahoo's account systems for an internet app. --James (talk) 15:08, 12 May 2009 (UTC)
replies: text: Makes sense; are there any sources that discuss using OpenID as a SSO system? If so, I can't see any problems with changing this. -- intgr [talk] 22:08, 12 May 2009 (UTC)
replies: text:  I've built such systems, but haven't published anything on it.  There is Google's documentation on implementing federated login here which might count: it describes using a fixed endpoint URL and directed identity to start the authentication process without having the user provide an identity URL, which is pretty much how the systems I've built work. --James (talk) 23:55, 12 May 2009 (UTC)
thread_title:  OpenID can be an SSO system 

message: The "see also" section seems to be rather lengthy, perhaps we could organize it under a few subheadings? I will try to get around to it sometime soon, but I invite the rest of you to give it a go. ...but what do you think? ~B Fizz (talk) 22:36, 20 August 2009 (UTC)
replies: text: i agree that it is rather long. The suggested reorganisation would probably be an improvement, but I think better still would be to cut most of it out: some of the topics are fairly indirectly related, and it seems to me "see also" sections should give just the most significant links. JamesBWatson (talk) 09:08, 14 December 2009 (UTC)
replies: text: I reorganized the content under the headings "Underlying concepts", "Related technologies", and "Implemetations of single sign-on". Unfortunately, I'm really not knowledgeable enough to determine what to delete, but perhaps we should break the "Implementations of single sign-on" section into a list of its own: List of implementations of single sign-on. Then we could simply "see also" a link to that list. ...but what do you think? ~B Fizz (talk) 18:45, 15 December 2009 (UTC)
replies: text: Since it seemed like the thing to do, I did it. The see also section now has only 4 links. =) Please review the changes and comment/act thereupon. ...but what do you think? ~B Fizz (talk) 18:58, 15 December 2009 (UTC)
replies: text: Much better. Thanks. JamesBWatson (talk) 15:06, 7 January 2010 (UTC)
thread_title:  "See also" subsections 

message: I'm a newcomer to this topic, but I was surprised to see no mention of SAML. Is that intentional? The SAML page currently says "The single most important problem that SAML is trying to solve is the Web Browser Single Sign-On (SSO) problem" which makes it seem relevant. Chris Dolan (talk) 19:21, 22 August 2011 (UTC)
thread_title:  SAML 

message: I am posting a white paper about this topic under resources and it keeps getting deleted. Does anybody know why?  — Preceding unsigned comment added by DParisotti (talk • contribs) 15:46, 12 September 2011 (UTC)
replies: text: If you click View History on the article, then you can see the edit summary given by the editor who reverted your change. The reason given was that the link you added requires some form of sign-up (or at least, surrender of personal information) for use. This is not permitted for external links; see WP:ELREG. From a brief glance, the "white paper" you tried to link to, also seemed aimed at selling some sort of support service or similar product. That's not what Wikipedia is for. --Demiurge1000 (talk) 16:52, 12 September 2011 (UTC)
thread_title:  Resources 

message: SSO is not a property, but a capability offered by access control systems  — Preceding unsigned comment added by Mullachv (talk • contribs) 05:04, 1 December 2012 (UTC)
thread_title:  Definition 

message: https://www.atlassian.com/software/crowd/overview/  — Preceding unsigned comment added by 190.216.150.147 (talk) 13:37, 14 March 2016 (UTC)
thread_title:  Add Atlassian Crowd reference