SAML Solution Options
For clients who are considering deployment of SAML to support SSO for their contract management solution, Contracts provides the following information for your reference. SAML is a widely used, easy to deploy, and affordable solution. Security Assertion Markup Language 2.0 (SAML 2.0) is a version of the SAML OASIS standard for exchanging authentication and authorization data between security domains. SAML 2.0 is an XML-‐based protocol that uses security tokens containing assertions to pass information about a principal (usually an end-‐user) between an identity provider and a web service. SAML 2.0 enables web-‐based authentication and authorization scenarios including single sign-‐on (SSO). There are a number of reputable suppliers in the identity management space. The following are the major solution providers:
Siteminder (now owned by CA)
A large suite for your identity management needs which includes federation using SAML2. This suite is in use by our clients currently in conjunction with our SSO offerings. You can find more information at: http://www.ca.com/us/internet-‐ access-‐control.aspx
Ping Identity
Another total suite that integrates with Active Directory to provide federation and single sign-‐on across the enterprise. More information at: http://www.pingidentity.com/
Microsoft AD FS 2.0
AD FS 2.0 added the ability to use SAML2 for federation and as a Microsoft product integrates completely with existing Active Directory deployments. You can find more information at: http://technet.microsoft.com/en-‐ us/library/adfs2(WS.10).aspx The download for the software is available at: http://www.microsoft.com/downloads/e...lyID=118c3588-‐ 9070-‐426a-‐ b655-‐6cec0a92c10b&displaylang=en
