1. Your Company
ACME Customer
ACME Needs SSO
Integration Assistance
AssureBridge
B2B Single Sign-On (SSO) Made Easy
Oleg Cohen
Oleg.Cohen@assurebridge.com
Page 1
2. Business Problem
What is AssureBridge
Value Proposition
AGENDA Demo
AssureBridge Difference
Page 2
3. Business Problem –
Your customers connect to disparate Supply Chain
Management applications
Your Company
ACME Customer
ACME Needs SSO
Integration Assistance
Page 3
4. Your Site Partner 2
Customer Need Partner 2
Partner 1
?
Partner 2
BUSINESS DRIVER:
To expand online offerings by connecting with
multiple partners’ Web based services
CUSTOMER PAINS:
Risk of losing profitable business opportunity
Partners lack ability to implement SSO quickly
Partner can’t support SSO standards
Technical staff is forced to support partner IT
CUSTOMER NEED:
Implement and support multiple partner SSO connections
Page 4
5. AssureBridge Offering – SSO Exchange
Fully-Managed Hosted
Single Sign-On Service
Connects to partners’ business Web applications
Powers seamless SSO between your
web applications and your partners’
Provides professional setup, configuration,
troubleshooting, and monitoring
by AssureBridge experts
Page 5
6. Value Proposition – Consistent Delivery
Customer Satisfaction
Our customers:
Consistent
Delivery • Painlessly integrate with
Value Proposition
OUR STRENGTHS
multiple service partners
Expertise
Reliable
Hosting
Page 6
7. Value Proposition – Expertise
Customer Satisfaction
Our customers:
Consistent • Painlessly integrate with multiple
Delivery
Value Proposition
service partners
OUR STRENGTHS
Expertise Are shielded from
supporting inexperienced
partner IT staff
Reliable
Hosting
Page 7
8. Value Proposition – Support
Customer Satisfaction
Our customers:
• Painlessly integrate with multiple
Consistent service partners
Delivery
Value Proposition
OUR STRENGTHS
Are shielded from supporting
Expertise inexperienced partner IT staff
Leverage fault-tolerant
Reliable infrastructure and expert
Hosting support to maximize
service uptime
Page 8
9. Value Proposition – Cost Savings
Customer Satisfaction
Our customers:
Consistent • Painlessly integrate with multiple
Delivery service partners
Value Proposition
OUR STRENGTHS
Benefit from
timely Internet
No longer required to invest into
Expertise hiring and retaining expensive
SSO solution
and hard-to-find experts
with lowest
Reliable
Hosting
support costs
Leverage fault-tolerant
infrastructure and expert support
to maximize service uptime
Page 9
10. AssureBridge Positioning
For online businesses who manage multiple
partner SSO connections
SSO Exchange is an affordable
full-service hosted solution
that delivers the most reliable standards-compliant
SSO functionality with the least amount of effort
To enable high level of
customer and partner satisfaction
and the growth of their business
Page 10
12. Secure Internet SSO is Highly Complex
Secure and reliable Internet SSO involves many
complex interactions among multiple
distributed parties. AssureBridge shields your
partners from these complexities.
Step 1a: User logs into
Step 8: Browser redirect
1 Reliable Site Step 1b: User
User to Speedy Rental site
Clicks on Rent-A-Car Site
with secure SAML token in 8 Link
request
Customer
Speedy Rent-A-Car Domain Reliable Insurance Domain
(https://www.speedyrental.com) 7 (https://www.reliableinsurance.com)
3
Speedy Rentals Reliable Insurance
Secure Partner Site Link to Rent a Car
Custom SSO Plug-in
Step 9: Decodes the token,
User
extracts user info and binds
Store 9 into Portal session context.
Step 3: IDP Step 2a: Portal Sends
Redirects to Request to IDP
Browser with a Step 2b: IDP gets
Application Component SAML artifact attributes, builds SAML
token Assertion , signs with a
2 Partner A’s Private Key
Step 7a: SP validates SAML Assertion
Cryptographic signature
Step 5: SP
Step 7b: SP send s browser secure SAML
requests SAML User
token with encrypted user attributes IDM
assertion via a Store
4 SOAP service
SAML 5 SAML Identity
Service Provider (SP) Provider (IDP)
6
Step 4: User Browser redirects
Step 6: IDP returns SAML
artifact token to SAML SP
assertion via a SOAP service
Page 12
13. Key SSO Challenges
Expertise Time-To-Market
True experts Build, implement,
are hard to find and integrate
Knowledge gaps Negotiate and coordinate with
are risky partners
Security Operations
Potential legal SSO issues =
and audit customer
exposure dissatisfaction
Data privacy protection SSO issues require complex
issues troubleshooting
Page 13
14. Key SSO Challenges – Expertise
Expertise Time-To-Market
True experts Build, implement,
are hard to find and integrate
Knowledge gaps Negotiate and coordinate with
are risky partners
Security Operations
Potential legal SSO issues =
and audit customer
exposure dissatisfaction
Data privacy protection SSO issues require complex
issues troubleshooting
Page 14
15. AssureBridge Solution – Expertise
Expertise Time-To-Market
SSO protocol Build, implement,
configuration and integrate
Web application Negotiate and coordinate with
integration partners
Security Operations
Potential legal SSO issues =
and audit customer
exposure dissatisfaction
Data privacy protection SSO issues require complex
issues troubleshooting
Page 15
16. Key SSO Challenges – Time-To-Market
Expertise Time-To-Market
SSO protocol Build, implement,
configuration and integrate
Web application Negotiate and coordinate with
integration partners
Security Operations
Potential legal SSO issues =
and audit customer
exposure dissatisfaction
Data privacy protection SSO issues require complex
issues troubleshooting
Page 16
21. AssureBridge Solution – Operations
Expertise Time-To-Market
SSO protocol Rapid
configuration provisioning
Web application Lightweight SSO adapters
integration Integration test harness
Security Operations
Leverages 24x7 support
industry Robust enterprise-
standards class platform
Secure multi-tenant platform Early warning system
Fully auditable system Triage
Page 21
22. Summary
AssureBridge rapidly delivers reliable
SSO empowering you to:
Consistently connect with partners in record time
Support many SSO partners without draining staff
Provide your customers with a rock-solid solution
Offer your partners an SSO solution they can afford
Page 22
24. For additional information,
including a personalized demo
please contact
Oleg Cohen
AssureBridge, Inc.
Oleg.Cohen@assurebridge.com
617-455-7927
Visit our Web Site at:
http://www.assurebridge.com
Page 24
26. How do we solve the problem?
Without AssureBridge
Partner A Partner B
Web Site A Web Site B
Integration ($$) Integration ($)
Commercial Home-Grown
SSO Product SSO Product
($$$) ($$)
SSO Infrastructure SSO Infrastructure
+ Operations ($$) + Operations ($)
Page 26
27. How do we solve the problem
Using AssureBridge Services
Partner A Partner B
Web Site A Web Site B
Integration ($) Integration ($)
SSO Exchange: ($)
Hosted AssureBridge SSO Services
Robust & Reliable Infrastructure
World-Class Operations
Page 27
29. Business Case
• Speedy Rental is a small regional provider
• Reliable Insurance is a large national company
• Reliable Insurance wants to expand its Web offering by
including Speedy’s online rental services
• Reliable has implemented a SAML-based enterprise
Internet SSO platform
• Reliable requires all its partners to support seamless
standards-based logon for its customers
• Speedy lacks ability to develop and maintain its own
SSO solution and is asking Reliable to assist
• Reliable Insurance recommends AssureBridge to
Speedy so it can connect reliably and affordably
Page 29
40. Desired SSO Experience – Partner Site
Seamlessly
taken to
Partner Site
Click on
Logout Link
User ID and Profile
Information
Transferred
Between Sites
Page 40
AssureBridge’s key mission is to enable B2B partners to quickly establish and securely operate Seamless Sign-On capability for their customers who navigate across multiple web sites.
Possible Secondary Business Drivers/Sought Outcomes: Expand customer base Increase revenue Increase online presence (e.g. to up-sell/cross-sell more of your product) Expand to other markets Leverage companion offerings
Fastest way to implement Internet Single Sign-On Requires the least technical expertise to set-up and manage Most reliable SSO solution available All this at a very affordable cost
Fastest way to implement Internet Single Sign-On Requires the least technical expertise to set-up and manage Most reliable SSO solution available All this at a very affordable cost
Fastest way to implement Internet Single Sign-On Requires the least technical expertise to set-up and manage Most reliable SSO solution available All this at a very affordable cost
You don’t need to subsidize inexperienced partner’s IT staff and mitigate risks of unreliable partner implementations/solutions.Buy and bill back.
Unlike complex in-house implementations, SSO Exchangedoesn’t require your partners to maintain high-priced expert staff and expensive in-house infrastructure.
See the appendix for demo screenshots
Finding ExpertsLengthy Delivery TimesSecurity ConcernsOperations and Support
Fully-managed, integrated, end-to-end solution. We contrast ourselves to other solutions in that they leave you to your own devices to figure out integration and support of the final solution.
“Guilty until proven innocent”
Anecdotally, during a recent incident when customer’s partner’s site was experiencing issues and the SSO product was immediately blamed, we were able to not only quickly show that the SSO wasn’t the issue, but also diagnose the root cause of the problem since our tools provide a lot of useful information.