Slide 28
Slide 28 text
Copyright © 2021 HCL Technologies Limited | www.hcltech.com
Copyright © 2021 HCL Technologies Limited | www.hcltechsw.com
When To Use SAML
There are four cases in which your organization may need SAML authentication configurations.
1. For Notes client users on Windows, Mac or Citrix, SAML authentication can be configured to authenticate
users to the ID vault. With this configuration, when users launch the Notes client, they are presented with a
login page from the IdP to authenticate and download their IDs from the ID Vault. This configuration is
referred to as Notes Federated Login (NFL).
2. For Notes client users on Windows or Citrix whose operating systems are joined to a Microsoft Active
Directory domain, SAML authentication can facilitate a single-sign on solution, with Active Directory
Federated Services (ADFS) configured for Integrated Windows authentication (IWA).
• SAML authentication at Notes client startup is referred to as Notes federated login with Integrated
Windows Authentication (IWA).
• The HTTP server task does not need to be run on the Domino vault server, because the HTTP portion
of SAML is handled within the Notes client.
3. For web client users such as HCL iNotes users or HCL Verse users, SAML authentication also facilitates a
single-sign on solution in which the user’s ID file is downloaded from the Notes ID vault.
• This type of SAML authentication is referred to as Web federated login and allows iNotes or Verse
users to use secure mail operations.
4. For users of other applications on Web servers, SAML-based single sign-on is an alternative to another
method of single sign-on (SSO) already available in Domino: multi-session server authentication.
• SAML is most useful when your Domino environment includes third-party Web applications whose
services your users access, or if multi-session server authentication is too limiting for your organization
-- for example if the target environment requires SSO across DNS domains.
28