An Infocard-Based Proposal for Unified Single Sign on

During last years, service federation has been a hot topic for researchers all along the world. In that context, single sign on (SSO) access to services has risen as a major concern for this kind of environments and many proposals suited to several scenarios have been stated. We can think of eduroam an eduGAIN as two major examples of this, the former as a federated initiative to provide access to network and the latter as a confederated proposal to provide secure access to Web (and non-web as grid) resources. Given that both architectures usually are deployed in a common security domain, it could be interesting to explore ways to bring both worlds together, that is, to find a way to get access as we get access to the network services. Currently, there are two disjoint actions: first get access to network, with its own authentication process, and second get access to other resources through eduGAIN. The process could be greatly simplified if a way is devised to unify both accesses what has been called unified Single Sing On (uSSO). In this work, we propose a novel framework to provide uSSO in that environment with minor modifications to existing deployments employing Infocard Technology.