Monday, October 12, 2009

Siebel and SSO

Siebel and Single Sign On Architecture


Siebel eBusiness Applications includes security adapters that are based on the LDAP and ADSI standards, allowing customers to use LDAP directories or Microsoft Active Directory (ADSI) for user authentication.


In an implementation using Siebel LDAP or ADSI security adapter authentication, a Siebel security adapter or a Siebel-compliant adapter authenticates a user’s credentials against the directory and retrieves login credentials from the directory. The security adapter functions as the authentication service in this architecture. Security adapter authentication provides a user with access to a single Siebel application only.



The steps in the security adapter authentication process are:

1. The user enters credentials to a Siebel application login form. These user credentials (a username and password) can vary depending on the way you configure the security adapter. For example, the username could be the Siebel user ID or an identifier such as an account or telephone number. The user credentials pass to the Siebel Web Server Extension (SWSE) and then to the authentication manager, a component of the Siebel Object Manager.


2. The authentication manager determines how to process the user credentials and calls the security adapter to provide authentication against the directory.


3. The security adapter returns the Siebel user ID and a database account to the authentication manager. (If roles are used, they are also returned to the authentication manager.)
4. The object manager uses the returned credentials to connect the user to the database and to identify the user.



To be continued in further posts...


No comments: