Some Basic Questions

• What is Single Sign On?
  • User proves identity once per session
  • Cryptographically secure
  • Single authentication authority
• What is Kerberos 5?
  • A protocol (and implementation) that has the above properties
  • Provides authentication not authorisation
• What is Webauth?
  • A protocol (and implementation) that makes use of Kerberos 5
  • a way to provide a SSO environment for web services
  • Provides authentication not authorisation
• Webauth is not limited to Kerberos 5