Implementación de un sistema de Single Sign On a través de Active Directory Federation Services

Abstract

This engineering degree project document documents the implementation of a Single Sign On (SSO) system for a Organization in order to centralize the authentication of the external applications of its network and that are not under its control since the suppliers offer these platforms as Cloud services. The implementation of this centralized authentication system contributes significantly to the security of information in the company, delegating the entire authentication process to a single component within the infrastructure. Therefore, it is vital to guarantee the availability and scalability of this service. An analysis is made to the specific needs of the organization where the local authentication systems and the Cloud platforms used by the business are identified. This is articulated with the analysis made of the state of the art where they find the available tools in the market, the advantages and disadvantages of each are discussed, implementation costs, support and maintenance. As a result of the analysis carried out, which first seeks a reliable, secure and economically feasible solution, it is found that the Microsoft Identity Federation tool, Active Directory Federation Services, meets all the requirements and additionally has a point in favor and is the native integration with the local authentication services that the company has and on which all the Core applications of the business operate. That is, it does not require additional development for existing applications.