Webex Single-Sign On FAQ
Question Index
What is Single Sign On (SSO)?
Single Sign On to Webex Services allows users to authenticate to their corporate network and schedule and host Webex Meetings without having to login with a separate Webex Meetings username and password.
How is Single Sign On to Webex Services accomplished?
Custom SSO API pages
One approach involves deploying custom Webex Meetings SSO web pages onto the customer's network. User's can develop their own custom SSO web pages using the Webex Meetings URL or XML API's or the Webex Meetings Professional Services team can develop them.
Users can access these custom SSO web pages only after authenticated to their corporate network. The custom SSO web pages automatically pass the user's Webex Meetings username and password via the Webex Meetings URL or XML API's to authenticate the user with the Webex Meetings site. Usually the custom SSO web pages can automatically create a Webex Meetings account if the user does not have an account on the Webex Meetings site. Typically user's do not know their Webex Meetings password's which prevents them from accessing the Webex Meetings site outside of their corporate network.
For more information on this SSO approach, see the Approaches to SSO Tech Note
SAML / ADFS SSO
Webex Meetings also supports SSO via identity federation standards including SAML and Microsoft ADFS. This approach requires customers to have an identity mangement system (IDMS) like CA SiteMinder, that supports SAML 1.1, 2.0 or ADFS 1.0 federation.
With SAML / ADFS SSO, the customer's identity management system controls access to the Webex Meetings site. Users will first authenticate to their corporate network. When a user requests access to the Webex Meetings site, the IDMS will validate the user and generate a digitally signed SAML or ADFS assertion with the user's Webex Meetings username. Webex Meetings will validate the assertion signature and authenticate the user to the Webex Meetings site.
For more information on this SSO approach, see the SAML Authentication Service Tech Note
