1. SSO Roadmap
ΑΚΑΔΗΜΑΪΚΟ ΔΙΑΔΙΚΤΥΟ
Pavlos Drandakis
June 2019

2. Identity/SSO latest developments
Protocols
Adaptive Authentication
Risk Based Authentication (RBA)
Multi Factor Authentication (MFA)
Just In Time provisioning (JIT)
System for Cross domain Identity Management (SCIM)
SSO Administration
User Attribute Consent (UAC)
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 2

3. Connection Protocols Supported Protocols CAS v1, v2
SAML v1.1 (attributes)
CAS v3 (attributes)
SAML v2 (federated Services, Drupal – WP plugins)
OAuth2
OpenID Connect
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 3

4. Adaptive Authentication
Accept or reject authentication requests based on
Geolocation (Country) IP
Browser
Time
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 4

5. Risk Based Authentication
Calculate Risk based on:
Geolocation info IP
Browser
Time
Actions
Stop Authentication
MFA
Notify User (sms, )
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 5

6. Multi Factor Authentication (MFA)
Username/password +
SMS (GUnet SMS service)
Mobile Smart Applications (i.e. Google Authenticator)
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 6

7. Multi Factor Authentication (MFA)
MFA Triggers/Scenarios
Globally, for all services
For specific services (or part of services)
For specific users
For specific IP, Browsers, Countries (Adaptive Authentication)
Based on calculated risk (Risk Based Authentication)
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 7

8. JIT provisioning – SCIM
Make SSO the Identity Provider for
Google Apps
Microsoft Office 365
Other SAML2/Cloud Services
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 8

9. SSO Administration Server Management Utilities/Web Interface
Logs & Audits
Surrogate athentication/Impersonate user
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 9

10. User Attribute Consent (UAC)
Let user:
Approve release of attributes
Control reminders
Manage/delete previous consents
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 10

11. SSO Roadmap Questions? Thank you
GUnet SSO Roadmap, © 2019 Greek Academic Network All Rights Reserved 11