Glossary Item Box

Government Gateway 2.2.0 (MR-01) ISV Developer Help (Doc Version 06/03/08) | Send comments on this topic.

# SSO for DRM Session Users

To improve operational efficiency, an organisation/agent registered with the Gateway can use (extend) their existing authentication/access control system to give employees permissions to act on existing Gateway service enrolments – rather than create a hierarchy of Gateway User and Assistant accounts for this purpose.

To use this facility an organisation/agent must first:

- Create a Delegated Rights Management (DRM) User account through the Gateway UI (www.gateway.co.uk) – this is done by a Gateway User. Note: This operation cannot be performed programmatically.
- The DRM User credential can then be used with the GsoDelegateRights method to associate employees – sometimes called DRM session users – with Gateway enrolments that they can then act on.

This section looks at:

- The DRM Sign-in operation which transparently signs-in a DRM session user to a SSO Portal so they can use the enrolments assigned to them through a browser.
- Example sign-in operations:
  - DRM Sign-in: WS-Federation
  - DRM Sign-in: Liberty Alliance
  - DRM Sign-in: SAML 1.1 POST Profile

© Crown Copyright 2008. All rights reserved