Fidel G. Patricio Jr.¹, Christopher A. Gurat¹, Joan Hazel V. Tiongson², Emmanuel Danguilan², Armilyn H. Wais^1,

The growth of web applications in educational institutions has made access control management increasingly complex and time-consuming. At Nueva Vizcaya State University (NVSU), the need to log in to multiple web applications with different credentials leads to a fragmented user experience and administrative burden. This study explores the implementation of Single Sign-On (SSO) using Active Directory Federation Services (AD FS) to streamline access and enhance security across NVSU’s web applications. AD FS allows users to authenticate with a single set of credentials, reducing password fatigue and improving user experience. Additionally, AD FS supports various authentication protocols, ensuring compliance with data protection regulations and industry standards. Literature highlights the benefits of SSO with AD FS, including enhanced security, reduced administrative overhead, and improved user satisfaction. However, challenges such as infrastructure complexity, integration with existing systems, and user adoption are also noted. This research aims to implement SSO using AD FS at NVSU and evaluates its impact on authentication security, user experience, and administrative efficiency. A mixed-methods approach, including surveys, interviews, technical assessments, and system testing, was used. The study followed the PPDIOO (Prepare, Plan, Design, Implement, Operate, Optimize) methodology for design and configuration. The results indicate that while the implementation of AD FS for SSO at NVSU posed challenges, it significantly improved security, user experience, and reduced administrative tasks. Recommendations for successful implementation and management are provided based on these findings. This research contributes to understanding the practical benefits and challenges of implementing SSO with AD FS in a university setting, offering valuable insights for similar institutions seeking to enhance their digital infrastructure.

Access Control, Authorization, Identity Management, Security Token, SSO Protocol