130 likes | 296 Views
The E-Authentication/Grants Demonstration. E-Authentication Grants Pilot. Multiple Federal agency partners E-Authentication-enabled applications SAML-based (Security Assertion Markup Lang.) Demonstrates multi-domain single sign on (MDSSO) Involving a variety of systems and platforms.
E N D
E-Authentication Grants Pilot • Multiple Federal agency partners • E-Authentication-enabled applications • SAML-based (Security Assertion Markup Lang.) • Demonstrates multi-domain single sign on (MDSSO) • Involving a variety of systems and platforms
System Components Overview Users E-Authentication Portal FastLane USDA ORC Grants.gov Credential Service Providers Agency Applications
E-Authentication Portal E-Authentication Portal Users • Primary Access Point for E-Authentication • Lists the available applications • Lists the associated credential service providers
Credential Service Providers Users • Provide the logon interface • Validate the provided credentials • Are trusted partners USDA ORC Credential Service Providers
Agency Applications Users • Provide the agency specific functions • Must be E-Authentication enabled FastLane Grants.gov Agency Applications
Demonstration Outline • Use of a USDA credential service to access the NSF FastLane application (use of external credentials) • Use of a commercial credential service to access the same agency application (use of third-party credentials) • Use of the USDA credential service to access the Grants.gov portal application and the NSF FastLane application (use of external credentials and single sign on to multiple agency applications)
Case 1: FastLane application is accessed using an external credential service • User Terry McBride • Starts at the Firstgov.gov E-Authentication Portal • Selects the NSF FastLane application • Selects the USDA Credential Service • Username and password is validated
Case 2: FastLane application is accessed using an ORC credential – Terry can use either credential at the FastLane application • User Terry McBride • Starts at the Firstgov.gov E-Authentication Portal • Selects the NSF FastLane application • Selects the ORC Credential Service • Username and password is validated
Case 3: USDA credential is used to access the Grants.gov and the NSF FastLane application, demonstrating multi-domain single sign on • User Terry McBride • Starts at the E-Authentication portal • Selects the NSF FastLane application • Checks Remember Credential Service box • Selects the USDA credential • Selects Grants.gov from favorites and is redirected without re-authenticating