Understand single signon concepts to implement
a solution that allows users to access resources with one initial
login.
A client that requests for access to a resource can be required
to do multiple logins. Multiple logins might be required when a protected resource is on a back-end web application server. One login for the WebSEAL server and one for the back-end server might be required.
Each login likely requires different login identities.
Figure 1. Multiple logins
The problem of administering and maintaining multiple login identities
can often be solved with a single signon (SSO) solution. A single
signon solution allows the user to access a resource, regardless of
the resource's location, with only one initial login. Any further
login requirements from back-end servers are handled transparently
to the user.