In This Article


Overview

One of the primary functions of Clearlogin is having a centralized location to access applications from the dashboard.  With Clearlogin you can add applications to the dashboard that support SAML/JWT (SSO), and also legacy applications that don't support SSO.  Clearlogin comes with a catalog of hundreds of predefined app templates to choose from that you can add to the dashboard.


Application Types

Clearlogin supports the following types of application connections:

  • Single Sign-On (SSO)
  • Password Manager Apps
  • Bookmark Apps
  • Learning Tools Interoperability (LTI) Apps

Single Sign-On (SSO)

Clearlogin's main focus is seamless authentication into applications via single sign-on (SSO).  SSO allows for authentication into an app without the use of a username or password.  Clearlogin contains a catalog of SSO app templates that you can use to easily set up your SSO apps, but Clearlogin also has a custom SSO app template, which allows you to configure an SSO app that is not in the catalog.

Typical SSO integrations use one of the following protocols, which Clearlogin supports:

SAML (Security Assertion Markup Language) - This is an older, yet more established, robust, and standardized SSO protocol that uses XML.  SAML supports public/private key pairs in the form of X.509 certificates.  Clearlogin supports both SAML 1.1 and 2.0 standards.  More Info >

JWT (JSON Web Token) - An up-and-coming standard that utilizes the JSON data format, and is possibly the most simple type of SSO integration.  While being potentially slightly less flexible than SAML, it is definitely the easiest to set up and is more self-contained than SAML.  Authentication is done via a token that is signed with a "secret" that is generated with the HMAC algorithm.  More Info >

Password Manager Apps

If an application does not support SSO, Clearlogin's browser-integrated Password Manager can be used to secure the user's credentials, and then provide those credentials to the application when the site is visited by the user.

When a user goes to a password manager app from their dashboard, the browser-integrated Password Manager plugin effectively types in their stored username and password using asymmetric SHA256 encryption into the app's authentication form fields, and clicks on the Submit button for them.  This helps eliminate the need to remember passwords for apps that do not support SSO, and of course, is a better experience due to the sign in automation.

Clearlogin contains a catalog of Password Manager app templates that you can use, or you can use the custom Password Manager app template to configure apps that are not in Clearlogin's catalog.

Clearlogin's Password Manager browser extension is supported in Google Chrome, Mozilla Firefox, and the new chromium-based Microsoft Edge.

Bookmark Apps

Clearlogin supports bookmarking (linking to) websites that don't require authentication. For example, you can give users easy access your company website, vendor sites, news sites, or other frequently visited websites.

LTI (Learning Tools Interoperability) Apps

LTI is a standard developed by IMS Global Learning Consortium for Learning Management Systems (LMS) and is primarily utilized by education-focused organizations.  LTI is built on OAuth 2.0, OpenID, and JWT.  It's primary function is to automatically serve a student with the tools and courses that they require contextually based on metadata containing education-centric information.


Application Access Tags

If you rename an access rule, this will break any applications assigned to that rule.






  • No labels