Policy Server Single Sign-On via 802.1X Agent
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users often face the inconvenience of repeatedly entering their credentials when accessing different network-based applications within a corporate network, even if they have already been authenticated through 802.1X by a policy server.
Innovation Solution
Implementing a method where a user device with an authentication agent communicates with a policy server to verify authenticity, allowing the policy server to act as an identity provider, and enabling application servers to authenticate users based on the original authentication, thereby facilitating single sign-on across multiple application servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users access multiple network-based applications within a corporate network, then they can utilize various network services, but they must repeatedly enter their credentials for each application
Solution Approach 1:
The system performs preliminary authentication through 802.1X before users access network services. The policy server stores authentication results and uses them to automatically authenticate users when they access network-based applications, eliminating the need for repeated credential entry while maintaining security
Solution Approach 2:
The policy server acts as an intermediary between the 802.1X authentication system and network-based applications. It stores authentication results and provides verification services to applications, enabling single sign-on functionality without requiring users to re-enter credentials for each application
2Reliability
If the policy server verifies authenticity for each application server request, then security is maintained, but additional communication steps are required
Solution Approach 1:
The policy server performs authentication verification in advance and stores the results. When application servers need to verify user authenticity, they can query the pre-stored authentication results from the policy server, avoiding repeated verification communication and reducing system complexity while maintaining security
Solution Approach 2:
The policy server creates copies of authentication results and stores them for subsequent verification. Application servers can access these stored authentication copies through simple queries rather than initiating complex verification protocols with the authentication system, reducing communication overhead
Data Source
AI summary
A method may include authenticating a device to a first server, where the device includes an agent; receiving a request, in the first server from a second server, to verify the authenticity of the device, where the device is not authenticated to the second server; sending a browser plug-in to the device to communicate with the agent for verifying the authenticity of the device; receiving, in the first server, a message from the agent verifying the authenticity of the device; and sending a message from the first server to the second server to authenticate the device to the second server.