Enterprise SSO Authentication Use Case

Status: Proposed This Use Case has been submitted as a new entry to the Use Cases Catalog. It has not yet been validated or reviewed.

Title: Enterprise SSO

Use Case Description: In enterprise SSO solutions, service providers receive an assertion that asserts a successful prior authentication event by the enterprise’s SSO authentication server. ( NISTIR 7817 Section 2.1 )

Use Case Category: Authentication

Contributor: Scott Shorter extracted from NISTIR 7817

Use Case Details

Actors:

• Service Provider - authorizes access based on assertions from the SSO authentication server
• SSO Authentication Server - authenticates Users and generates assertions for Service Providers
• User - has a full account with SSO Authentication Server, wishes to grant access to Third-party Service.

Goals:

Assumptions:

Requirements:

Process Flow:

Success Scenario:

Error Conditions:

Relationships

• Extended by:

• Extends:

References and Citations

• NISTIR 7817