Single Sign-on authentication

Single sing-on supports access to the application verified by authentication from external source

AyMINE internally supports SSO with the external identity provider. Actually it support external identity from Microsoft. AyMINE Busienss is the registered MS Azure application.

SSO integration

Communication with external Single-Sign portal describes the activity diagram bellow:

Methods requires authentication verification from external SSO application. Server configuration is always client-specific and should by set up by system administrators including definition of the client-specific page for SSO redirect.

Standard login dialog cannot be used to login to the SSO account.

SSO method Limitations

SSO is not usable with the mobile application. Using the application could be total disabled for client's users or users should define password usable only for application.

Mobile application security

When user has Single-sign and mobile application activated together, application should be activated using the sign-up scheme:

1. Start AyMINE at computer (browser) using the SSO authentication
2. Request create password for mobile application
3. Install & start mobile application
4. Login to the mobile application with password
5. Confirm application in the AyMINE at browser
6. Logout and login again the to mobile application

Even when user has defined password for application:

• Password could be used to login using the default login dialog
• No other device could use the password. Each device should be individually confirmed in the browser before it could access the account

Activity diagram for application registration with single-sign on authentication mode.