webNetwork: Single Sign-on

Simplifying user access to corporate resources is critical when reducing the overall management costs and improving usability of any product. By leveraging Stoneware's single sign-on technology, users can gain seamless access to all applications and services inside the private cloud with just their network user ID and password. Stoneware provides a broad set of single sign-on capabilities to simplify user access to file systems, databases, web applications, remote desktops, terminal servers, and published Windows applications.

Single Sign-on Details

Lockbox - Stoneware's Lockbox provides secure and encrypted storage of all user IDs, passwords, and other personal information. The Lockbox is a critical component in the single sign-on process when organizations have applications that do not share the same authentication credentials. The Lockbox becomes the encrypted store for all the various application and system credentials needed by a user.
  • Stores and encrypts a user's account names and passwords to backend applications and systems
  • Automatically encrypts and decrypts credentials when passed to the single sign-on process
  • Users can manage their credentials through Stoneware's Single Sign-on Manager
  • Create "hidden" authentications by limiting a user's access to their personal Lockbox
  • Supports multiple single sign-on "identities" for a given application or backend service
Single Sign-on for Web Applications - webNetwork supports single sign-on for the rapidly growing number of enterprise web applications. Stoneware's "In the Flow" technology ensures that the single sign-on process takes place inside the trusted network and application credentials are never passed to the web browser.
  • Background authentication to web servers, web portals, and web applications
  • NTLM (Integrated Windows Authentication) support for Microsoft IIS servers
  • BASIC Authentication support for web applications, servers, and portals
  • FORM Authentication support for custom web login pages
  • "In the Flow" technology ensures that application and system credentials are never passed to the browser
Single Sign-on for Terminal Services and Citrix - Users can seamlessly authenticate to published desktops and applications configured on Microsoft Terminal Servers and Citrix Servers.
  • Background authentication to Microsoft Terminal Servers with either the Microsoft or Novell workstation client
  • Background authentication to Citrix Servers with either the Microsoft or Novel workstation client
  • Single sign-on wizard for incorporating Lockbox, Stoneware, or Directory variables into the authentication process
Single Sign-on for Published Applications - Stoneware provides single sign-on to the Windows applications that are published either through a Microsoft Terminal Server or a Citrix Server. Users can seamlessly authenticate to any published Windows applications which require authentication.
  • Background authentication to published Windows applications installed on a Terminal or Citrix Server
  • In-line scripting allows any administrator to create a custom single sign-on to Windows applications in just minutes
  • XML scripting provides expert level scripting of events, resets, and prompts
  • Two-tier Server/Relay architecture means that credential storage is located inside the trusted network requiring no access from the DMZ
  • Supports the use of Lockbox, Stoneware, and Directory Services variables
Single Sign-on for File Systems - Provides users with background authentication to any network file system or share.
  • Supports Windows, NetWare, Linux, FTP, SFTP, and FTPS file systems
  • Single sign-on wizard for incorporating Lockbox, Stoneware, or Directory variables into the authentication process
  • Supports identity masquerading.
  • Supports identity "switching"
Single Sign-on for Databases - Provides users with background authentication to any backend ODBC/JDBC database.
  • Supports any ODBC/JDBC database including Microsoft SQL, Postgres, MySQL, DB2, Informix, Sybase, Microsoft Access.
  • Single sign-on wizard for incorporating Lockbox, Stoneware, or Directory variables into the authentication process
  • Supports identity masquerading.
  • Supports identity "switching"