The users fill in the login forms sent from SSO server with ID, password and other anthentication data which are required for the systems including Google Apps. SSO get authenticated from anthentication server such as LDAP, then redirect the results to Google Apps.
Google Apps will check authentication information and digital signature, if the authentication result is varified, Google Apps can be used.
Once the user anthentication is finished, the session is certificated and there is no need to authenticate again for later sessions.
|