Single Sign On

Single sign-on is a method where a single action of user authentication and authorization can permit a user to access NuViewHR with their AD username and password.

The figure below explains the different components involved

Explanation of the Process:
	NuView will provide an IIS Web application that is installed on the client network. This will do the initial authentication of the user against the client's AD network.
	The end user will go to the IIS Web application hosted on the client's network instead of directly going to the NuViewHR site.
	The IIS web application will verify the username and password against the client's AD server.
	Once the authentication passes, then the IIS Web application will take just the network username of the user, current timestamp and a secret passphrase and encrypt it and forward the request to the actual NuViewHR site.
	NuViewHR will decrypt the parameters from the request and it does the following checks Make sure the passphrase matches what is configured in NuViewHR Make sure the request originated only a few seconds before
	Once the above checks are passed then it will fetch the NuViewHR user that is mapped to this network user and log that user into the application.
	Notes: RSA public/private keys are used for encryption and decryption.