SSO Implementation Guide: From Legacy Applications to Modern Identity Platforms
Typically, enterprise applications don't rely on just one authentication method. A company can have modern cloud applications as well as older applications that rely upon headers, passwords, LDAP, Kerberos, or NTLM. The combination can complicate an SSO implementation more than just integration of applications to an identity provider. The journey towards a successful migration begins with knowing what each application supports and progresses towards a centralized authentication without impacting critical business systems. Start With an Application Inventory Prior to changing authentication, establish an application listing of the applications that employees are using. This ensures that systems that are not as obvious and older systems are not overlooked. For each application, identify: Who uses it and how critical it is Where it is hosted Its current authentication method Whether it supports SAML or OpenID Connect (OIDC) Dependencies on directories or existing identity systems W...