10Duke Identity Provider FAQs

The documentation for all our products is in English. Support can be offered in English, Finnish and Swedish. Please do get in touch for custom requirements. (more)

Absolutely! The 10Duke Identity Provider is a OS-neutral white-label service that provides your online customers and partners with secure and seamless SSO access to all of your online products and services. (more)

Yes, the IdP can be configured to include a number of alternative ways to authenticate users. The challenge is harder on the client application side as the protocol and best practises require that clients connecting to the IdP do not know how the user is authenticated. This means that the IdP is responsible for presenting the challenge and the client application(s) must have the capability to present relevant UI and methods for the user to interact. Common technologies and methods usually use "smart card" based approaches. (more)

Yes, the user would log in to the first web application, but in practice they would be actually logging into the Identity Provider. This would then authenticate them and grant access to the first web-application. When the user tries to access the second web application, a similar process would occur and the IdP would authenticate them to the second application.

The process is the same for the third (or N) web application. For the user, they only login once and each subsequent authentication happens so quickly it is not normally noticeable by them. Similarly, once they log out of one application, they are logged out of the IdP itself and therefore are logged out of all applications. (more)

The default password reset process requires the customer to click on a 'Forgot Password?' link and then enter their registered email address. The IdP then sends a link via email to the customer which takes them through a password reset process. The default security level (which can be made either more strict and more lenient) uses an expiration time-based token and a user secret in the process. More strict security can include e.g. SMS delivered tokens to ensure that the genuine user has required the password reset. (more)

We run a monthly concise-and-friendly newsletter and you can signup using the form on our website (bottom right of the Home page, under "Contact us" section): http://www.10duke.com/

All important product updates and new features are announced as we roll them up. (more)