This document provides a brief overview of the security updates for customers using Single Sign-On (SSO) with RHEL 8.
Expected Log-In and Log-Out Behavior
Log-In: There are no changes to your log-in process. You will continue to log in with your existing credentials as before.
Log-Out: The log-out behavior is now configured to specific parameters set by the Airline Carriers IT team. This is a coordinated effort between ALC and NavBlue to ensure a more secure log-out experience.
Differences Between RHEL 6 and RHEL 8
The key difference lies in the underlying security protocol used for SSO. The update is a significant step forward in security.
RHEL 6 (Old IDP)
RHEL 6 used an older Identity Provider (IDP) that did not fully comply with the SAML 2.0 security standard. While functional, this version of the protocol was not the most secure.
RHEL 8 (New IDP)
RHEL 8 uses a new IDP that adheres to the SAML 2.0 security standard. This is the current industry standard for secure SSO, providing a more robust and protected method for exchanging user authentication data.
This upgrade ensures that our SSO configuration is aligned with modern security practices, offering you a more secure and reliable service.