Single Sign-On
Larger organizations invest enormous effort and resources into
the management of all systems and applications they have. This is
especially true for all access-controll where one can savely assume
that per 500 empoyees the organization needs one full-time support
person just for access controll management.
It is well known that large organisations are unable to effectively
erase employees from all systems when these employees leave the
organization.
The search is on for years already to solutions which reduce this
enormous overhead. The SIRB is able to solve, quite elegantly, the
access controll problems for large organizations
- The SIRB core serves as the central switching unit between users
and applications
- Each application maintains its own data repository which connects
the user the application specific userID for this user and the
application specific password.
- The user wants to access an application and formulates a request
for access to the SIRB
- The user signs (approves) this request so that the application
knows which user requests access
- The SIRB verifies with the HR data repository if there are any
restrictions
- The applications data repository presents the userID and password
to the SIRB which passes it on to the user
- The user logs in to the application.
If a user leaves the organization the HR department removes the
user from its data repository. It may also create an update request
to the SIRB, which is passed on to all data repositories where the
user has an entry.
|