Single sign-on with one time password

The organizations are shifting from the desktop based solution to web based platform to solve their business needs. The amass of these different systems poses problems for end-users, who must frequently provide their username/password across different systems, as well as for system administrators, who must manage security and access for those systems. Single sign-on mechanisms have become increasingly important in solving these problems. Although there are several ways to implement single sign-on feature (e.g. Kerberos and X.509), it may be difficult to modify a particular existing application to comply with the different protocols imposed by the new authentication mechanism. Moreover, these methods of implementing single sign-on require the new infrastructure which will cost both time and money. This might creates hindrance to the small organization for the implementation of single sign-on feature. Present study proposes a method of implementing single sign-on using the one time password. In this approach, when user manually authenticates in the portal site and tries to login into the subsequent applications then one time password is generated for that session and this password is used to authenticate the user into the applications. This method eliminates the necessity of setting up the new infrastructure and also the existing system requires minimal changes to incorporate the single sign-on feature in it. Hence, the organization can implement the solution in a cost effective manner.