1. Your Company
ACME Customer
ACME Needs SSO
Integration Assistance
AssureBridge
B2B Single Sign-On (SSO) Made Easy
Oleg Cohen
Oleg.Cohen@assurebridge.com
Page  1

2.  Business Problem
 What is AssureBridge
 Value Proposition
AGENDA  Demo
 AssureBridge Difference
Page  2

3. Business Problem –
Your customers connect to disparate Supply Chain
Management applications
Your Company
ACME Customer
ACME Needs SSO
Integration Assistance
Page  3

4. Your Site Partner 2
Customer Need Partner 2
Partner 1
?
Partner 2
BUSINESS DRIVER:
To expand online offerings by connecting with
multiple partners’ Web based services
CUSTOMER PAINS:
 Risk of losing profitable business opportunity
 Partners lack ability to implement SSO quickly
 Partner can’t support SSO standards
 Technical staff is forced to support partner IT
CUSTOMER NEED:
Implement and support multiple partner SSO connections
Page  4

5. AssureBridge Offering – SSO Exchange
Fully-Managed Hosted
Single Sign-On Service
Connects to partners’ business Web applications
Powers seamless SSO between your
web applications and your partners’
Provides professional setup, configuration,
troubleshooting, and monitoring
by AssureBridge experts
Page  5

6. Value Proposition – Consistent Delivery
Customer Satisfaction
Our customers:
Consistent
Delivery • Painlessly integrate with
Value Proposition
OUR STRENGTHS
multiple service partners
Expertise
Reliable
Hosting
Page  6

7. Value Proposition – Expertise
Customer Satisfaction
Our customers:
Consistent • Painlessly integrate with multiple
Delivery
Value Proposition
service partners
OUR STRENGTHS
Expertise  Are shielded from
supporting inexperienced
partner IT staff
Reliable
Hosting
Page  7

8. Value Proposition – Support
Customer Satisfaction
Our customers:
• Painlessly integrate with multiple
Consistent service partners
Delivery
Value Proposition
OUR STRENGTHS
 Are shielded from supporting
Expertise inexperienced partner IT staff
 Leverage fault-tolerant
Reliable infrastructure and expert
Hosting support to maximize
service uptime
Page  8

9. Value Proposition – Cost Savings
Customer Satisfaction
Our customers:
Consistent • Painlessly integrate with multiple
Delivery service partners
Value Proposition
OUR STRENGTHS
Benefit from
timely Internet
 No longer required to invest into
Expertise hiring and retaining expensive
SSO solution
and hard-to-find experts
with lowest
Reliable
Hosting
support costs
 Leverage fault-tolerant
infrastructure and expert support
to maximize service uptime
Page  9

10. AssureBridge Positioning
For online businesses who manage multiple
partner SSO connections
SSO Exchange is an affordable
full-service hosted solution
that delivers the most reliable standards-compliant
SSO functionality with the least amount of effort
To enable high level of
customer and partner satisfaction
and the growth of their business
Page  10

11. AssureBridge SSO Solution
DEMO*
* Demo Screenshots are available in the Appendix
Page  11

12. Secure Internet SSO is Highly Complex
Secure and reliable Internet SSO involves many
complex interactions among multiple
distributed parties. AssureBridge shields your
partners from these complexities.
Step 1a: User logs into
Step 8: Browser redirect
1 Reliable Site Step 1b: User
User to Speedy Rental site
Clicks on Rent-A-Car Site
with secure SAML token in 8 Link
request
Customer
Speedy Rent-A-Car Domain Reliable Insurance Domain
(https://www.speedyrental.com) 7 (https://www.reliableinsurance.com)
3
Speedy Rentals Reliable Insurance
Secure Partner Site Link to Rent a Car
Custom SSO Plug-in
Step 9: Decodes the token,
User
extracts user info and binds
Store 9 into Portal session context.
Step 3: IDP Step 2a: Portal Sends
Redirects to Request to IDP
Browser with a Step 2b: IDP gets
Application Component SAML artifact attributes, builds SAML
token Assertion , signs with a
2 Partner A’s Private Key
Step 7a: SP validates SAML Assertion
Cryptographic signature
Step 5: SP
Step 7b: SP send s browser secure SAML
requests SAML User
token with encrypted user attributes IDM
assertion via a Store
4 SOAP service
SAML 5 SAML Identity
Service Provider (SP) Provider (IDP)
6
Step 4: User Browser redirects
Step 6: IDP returns SAML
artifact token to SAML SP
assertion via a SOAP service
Page  12

13. Key SSO Challenges
Expertise Time-To-Market
 True experts  Build, implement,
are hard to find and integrate
 Knowledge gaps  Negotiate and coordinate with
are risky partners
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  13

14. Key SSO Challenges – Expertise
Expertise Time-To-Market
 True experts  Build, implement,
are hard to find and integrate
 Knowledge gaps  Negotiate and coordinate with
are risky partners
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  14

15. AssureBridge Solution – Expertise
Expertise Time-To-Market
 SSO protocol  Build, implement,
configuration and integrate
 Web application  Negotiate and coordinate with
integration partners
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  15

16. Key SSO Challenges – Time-To-Market
Expertise Time-To-Market
 SSO protocol  Build, implement,
configuration and integrate
 Web application  Negotiate and coordinate with
integration partners
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  16

17. AssureBridge Solution – Time-To-Market
Expertise Time-To-Market
 SSO protocol  Rapid
configuration provisioning
 Web application  Lightweight SSO adapters
integration  Integration test harness
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  17

18. Key SSO Challenges – Security
Expertise Time-To-Market
 SSO protocol  Rapid
configuration provisioning
 Web application  Lightweight SSO adapters
integration  Integration test harness
Security Operations
 Potential legal  SSO issues =
and audit customer
exposure dissatisfaction
 Data privacy protection  SSO issues require complex
issues troubleshooting
Page  18

19. AssureBridge Solution – Security
Expertise Time-To-Market
 SSO protocol  Rapid
configuration provisioning
 Web application  Lightweight SSO adapters
integration  Integration test harness
Security Operations
 Leverages  SSO issues =
industry relationship
customer
standards problems
dissatisfaction
 Secure multi-tenant platform  SSO issues require complex
 Fully auditable system troubleshooting
Page  19

20. Key SSO Challenges – Operations
Expertise Time-To-Market
 SSO protocol  Rapid
configuration provisioning
 Web application  Lightweight SSO adapters
integration  Integration test harness
Security Operations
 Leverages  SSO issues =
industry customer
standards dissatisfaction
 Secure multi-tenant platform  SSO issues require complex
 Fully auditable system troubleshooting
Page  20

21. AssureBridge Solution – Operations
Expertise Time-To-Market
 SSO protocol  Rapid
configuration provisioning
 Web application  Lightweight SSO adapters
integration  Integration test harness
Security Operations
 Leverages  24x7 support
industry  Robust enterprise-
standards class platform
 Secure multi-tenant platform  Early warning system
 Fully auditable system  Triage
Page  21

22. Summary
AssureBridge rapidly delivers reliable
SSO empowering you to:
Consistently connect with partners in record time
Support many SSO partners without draining staff
Provide your customers with a rock-solid solution
Offer your partners an SSO solution they can afford
Page  22

23. Q&A
What are your questions?
Page  23

24. For additional information,
including a personalized demo
please contact
Oleg Cohen
AssureBridge, Inc.
Oleg.Cohen@assurebridge.com
617-455-7927
Visit our Web Site at:
http://www.assurebridge.com
Page  24

25. APPENDIX
Page  25

26. How do we solve the problem?
Without AssureBridge
Partner A Partner B
Web Site A Web Site B
Integration ($$) Integration ($)
Commercial Home-Grown
SSO Product SSO Product
($$$) ($$)
SSO Infrastructure SSO Infrastructure
+ Operations ($$) + Operations ($)
Page  26

27. How do we solve the problem
Using AssureBridge Services
Partner A Partner B
Web Site A Web Site B
Integration ($) Integration ($)
SSO Exchange: ($)
 Hosted AssureBridge SSO Services
 Robust & Reliable Infrastructure
 World-Class Operations
Page  27

28. AssureBridge SSO Solution for Reliable Insurance
DEMO
Page  28

29. Business Case
• Speedy Rental is a small regional provider
• Reliable Insurance is a large national company
• Reliable Insurance wants to expand its Web offering by
including Speedy’s online rental services
• Reliable has implemented a SAML-based enterprise
Internet SSO platform
• Reliable requires all its partners to support seamless
standards-based logon for its customers
• Speedy lacks ability to develop and maintain its own
SSO solution and is asking Reliable to assist
• Reliable Insurance recommends AssureBridge to
Speedy so it can connect reliably and affordably
Page  29

30. Demo
BEFORE SINGLE SIGN-ON
Page  30

31. No SSO Experience – Login Page
Log into
Your Site
Page  31

32. No SSO Experience – Partner Link
Click on
External Link
Page  32

33. No SSO Experience – Need to Log In Again
Prompted to Log
In Again
(Another User ID
and Password)
Page  33

34. No SSO Experience – Partner Site
Click on
Logout Link
Page  34

35. No SSO Experience – Logout
Logged Out
from Partner
Page  35

36. No SSO Experience – Still signed in
Remained
signed in with
Reliable
Page  36

37. Demo
SINGLE SIGN-ON EXPERIENCE
Page  37

38. Desired SSO Experience – Login Page
Log into
Your Site
Page  38

39. Desired SSO Experience – Partner Link
Click on
Partner Link
Page  39

40. Desired SSO Experience – Partner Site
Seamlessly
taken to
Partner Site
Click on
Logout Link
User ID and Profile
Information
Transferred
Between Sites
Page  40

41. Desired SSO Experience – Logout
Logged Out
from Partner
Page  41

42. Desired SSO Experience – Logged Out from All
Signed out
from both
sites
Page  42