We have acquired Talent Management Cloud (SaaS) Software Service and we are considering a solution to implement Single Sign-on (SSO) against Active Directory.
The provided guide to implement SSO from the service provider assumes that SSO will only work if the user is logged in to the network domain and opened the browser from inside the work network.
But this solution is not good. This means when the user needs to access the software from outside the work network, he will have to either login using VPN or he must use the Username/Passwrod defined in the software User Admin Section which is different
than the credentials defined in Active Directory. In both cases, it is a pain.
So, we are considering the following solution to remove dependency on the software specific authentication, and also to avoid the need to start VPN.
The solution we are considering is as follows:
1. Develop the main Login Page using ASP.NET and host it using our own ...
Go to the complete details ...