Implémentation de l’authentification à double facteur dans la solution de SSO AAA LemonLDAP::NG 2.0

Abstract : Nowadays, more and more corporations and organisations provide on-line applications or services to their customers and staff. Memorising complex passwords for each of those systems is a challenge many users face every day. Single Sign On, also known as SSO, may be the solution to this issue. It allows users to have access to multiple applications by signing in using only one account to different systems and resources. It also has other important features in regards to simple management, security, ease of use and seamlessness. In case of complex SSO architecture, multiple usernames and passwords not only cause frustration but are also a serious security weakness. Basic username and password combinations are becoming more and more vulnerable to theft. To manage this risk, you can use security-enhancing methods like second factor authentication (2FA). 2FA works by confirming a user’s claimed identity during login by running an extra verification check on the user attempting to log in with their username and password. With 2FA, a user will enter their username and password as normal. But, to prove it’s really the account owner trying to log in, the user will then have to provide the “second factor”, which can be based on the following : something you know, something you have or something you are. Enabling just one of these additional factors on top of the usual login credentials will significantly improve the security of your account. In this paper, I first introduce Authentication – Authorization and Accounting (AAA) concepts, SSO in general terms by comparing LemonLDAP::NG and Open AM solutions, HTTP protocol and eIDAS authentication levels. Afterwards, I describe LemonLDAP::NG WebSSO solution and explain how it works. Finally, I present my LL::NG 2FA implementation. I developed a 2FA engine able to, depending on context, to provide 2FA services or manage different devices. To conclude I propose some features to improve or include in LL::NG 3.0.
Complete list of metadatas

Cited literature [101 references]  Display  Hide  Download

https://dumas.ccsd.cnrs.fr/dumas-02023261
Contributor : Cnam - Service Commun de la Documentation - Bibliothèque Centrale <>
Submitted on : Monday, February 18, 2019 - 2:27:27 PM
Last modification on : Saturday, June 1, 2019 - 1:22:09 AM

File

2018.TH.Maudoux.Christophe.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : dumas-02023261, version 1

Collections

Citation

Christophe Maudoux. Implémentation de l’authentification à double facteur dans la solution de SSO AAA LemonLDAP::NG 2.0. Cryptographie et sécurité [cs.CR]. 2018. ⟨dumas-02023261⟩

Share

Metrics

Record views

131

Files downloads

757