What is Federal certification

In the early days of the Internet, you had to sign up for a new username and password every time you visited a new site. The account is stored only on this site. You can’t stay logged in from one site to another, and user information can’t be exchanged between sites. Federated authentication unites different identity providers to authenticate users through standard protocols. Federation is a trust relationship between identity providers, which can pull user information from each other through standard protocols.

Why federal certification

Federated authentication is a kind of distributed authentication. When a user logs in with an identity provider, he can choose to log in with the trusted federated authentication provider. Users can log in to a new system through federated authentication instead of having to register their accounts in a new system each time. For example, many websites now have their own account secret registration and login methods, as well as the wechat scan code direct login method. The wechat is the identity federation of this website. Users do not need to fill in information to register an account, but can log in directly using wechat. Using federated authentication has the following advantages: users do not have to create a new account every time. Federated authentication allows users to travel across different organizations and sites.

Principles of Federal Certification

The user is redirected to the identity federation for authentication. The user is first authenticated in the identity federation, and the identity federation sends identity assertion to Authing, which is equivalent to the user completing authentication in Authing, and Then Authing sends identity assertion to the business system, and the business system completes login.

Authing’s federal certification capability

Authing supports a variety of standard protocols for federal certification.

OAuth2

Authing supports rich social login and custom OAuth2 identity federation.

OpenID Connect

Authing supports federal authentication using the OIDC protocol.

SAML2

Authing supports federal authentication using the SAML2 protocol.

LDAP

Authing supports federated authentication using LDAP.

CAS

Authing supports federal authentication using the CAS protocol.