I’ve dealt with a lot of integration projects involving Single Sign-On using SAML2.0 but LogMeIn Rescue’s process for achieving this threw me for a loop initially. I’d like to share a little insight to hopefully help others achieve SSO using LMI Rescue with minimal pain.
There are two types of software companies; those that profit from improving the user’s experience and those that profit from the user’s lack of technical knowledge. When designing software, it’s easy to take the lazy route and only create the bare minimum required to make a process work (requiring manual editing of configuration files, setting permissions, offloading any other unfinished task to the end-user). Even if the software being created does, in the end, accomplish a complex task, the result will be an alienated customer with dwindling chance of any purchase in the future.
Dropbox for Business accounts can make use of Dropbox’s Single Sign-On (SSO) features. This allows for centralized administration of users instead of having to track down each user’s known application accounts and modifying settings there. SimpleSAMLphp is a flexible SAML 2.0 IdP or SP which allows admins to quickly deploy a previously complex server with minimal configuration.