Cross-domain single sign-on is a method for transferring user credentials across multiple secure domains. CDSSO allows the integration of multiple secure domains by enabling users to move between different domains with a single set of credentials.
A user can make a request to a resource located in another domain. The CDSSO transfers an identity token from the first domain to the second domain. Thus, the second domain can authenticate the user without the need for the user to provide new credentials.
The authentication flow for multiple domains is as follows:
A user requests access to a resource in the second domain using a link in the first domain.
The server processes the request in domain A, then sends an authentication token that states that the information comes from the first domain.
The domain B server decrypts and validates the token, calling out a CDSSO authentication mechanism. The domain B authorization service allows or denies access to protected objects.