Implementing Single Sign-On (SSO) with Active Directory Federation Services for Enhanced Authentication and Security in Nueva Vizcaya State University Web Applications

Fidel G. Patricio Jr.¹, Christopher A. Gurat¹, Joan Hazel V. Tiongson², Emmanuel Danguilan² and Armilyn H. Wais^1,

¹Computer Science Department, Nueva Vizcaya State University, Bayombong, Nueva Vizcaya, Philippines

²Information Systems, Nueva Vizcaya State University, Bayombong, Nueva Vizcaya, Philippines

Cite this paper:
Fidel G. Patricio Jr., Christopher A. Gurat, Joan Hazel V. Tiongson, Emmanuel Danguilan and Armilyn H. Wais. Implementing Single Sign-On (SSO) with Active Directory Federation Services for Enhanced Authentication and Security in Nueva Vizcaya State University Web Applications. Journal of Computer Sciences and Applications. 2025; 13(2):41-47. doi: 10.12691/jcsa-13-2-1

Abstract

The growth of web applications in educational institutions has made access control management increasingly complex and time-consuming. At Nueva Vizcaya State University (NVSU), the need to log in to multiple web applications with different credentials leads to a fragmented user experience and administrative burden. This study explores the implementation of Single Sign-On (SSO) using Active Directory Federation Services (AD FS) to streamline access and enhance security across NVSU’s web applications. AD FS allows users to authenticate with a single set of credentials, reducing password fatigue and improving user experience. Additionally, AD FS supports various authentication protocols, ensuring compliance with data protection regulations and industry standards. Literature highlights the benefits of SSO with AD FS, including enhanced security, reduced administrative overhead, and improved user satisfaction. However, challenges such as infrastructure complexity, integration with existing systems, and user adoption are also noted. This research aims to implement SSO using AD FS at NVSU and evaluates its impact on authentication security, user experience, and administrative efficiency. A mixed-methods approach, including surveys, interviews, technical assessments, and system testing, was used. The study followed the PPDIOO (Prepare, Plan, Design, Implement, Operate, Optimize) methodology for design and configuration. The results indicate that while the implementation of AD FS for SSO at NVSU posed challenges, it significantly improved security, user experience, and reduced administrative tasks. Recommendations for successful implementation and management are provided based on these findings. This research contributes to understanding the practical benefits and challenges of implementing SSO with AD FS in a university setting, offering valuable insights for similar institutions seeking to enhance their digital infrastructure.

Keywords:
Access Control Authorization Identity Management Security Token SSO Protocol

This work is licensed under a Creative Commons Attribution 4.0 International License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

References:

[1]	Microsoft, "Active Directory Federation Services Overview," Microsoft Documentation, 2021.
[2]	L. Ehrenhalt, "SSO in Healthcare: The Benefits of Single Sign-On Authentication," TechTarget, 2018.
[3]	A. A. Azeez and E. Sundararajan, "Single Sign-On Authentication for University Web Applications Using Active Directory Federation Services," International Journal of Computer Applications, vol. 127, no. 1, pp. 1–5, July 2015.
[4]	A. Dumitrascu, C. Zaharia, C. Popescu, and G. Carutasu, "Analysis of Active Directory Federation Services in a Multiplatform Environment," Procedia Computer Science, vol. 91, pp. 1002–1009, 2016.
[5]	R. Barnes and M. Gozali, "Active Directory Federation Services (AD FS) Design Guide," Microsoft TechNet, 2017.
[6]	B. Gruver, "Azure Active Directory: Implementing SSO and SaaS Integrations," O’Reilly Media, 2018.
[7]	PricewaterhouseCoopers, "Data Protection & Privacy," Risk Assurance, 2023.
[8]	R. Abreu and C. Ribeiro, "User Experience in the Authentication Process of Web Applications," Human-Computer Interaction – INTERACT 2019, pp. 315–334, Sept. 2020.
[9]	SimpleSAML, "SimpleSAMLphp Installation and Configuration," SimpleSAML Documentation, 2023.
[10]	A. Balakrishnan and K. S. Sandeep, "Web Single Sign-On Using Identity Federation and Lightweight Security Service," Proceedings of the 8th International Symposium on Embedded Computing and System Design (ISED), pp. 203–208, Dec. 2018.
[11]	Miniorange, "PHP AD FS Single Sign-On (SSO) | PHP AD FS SAML SSO," Miniorange Documentation, 2023.
[12]	N. N. Thong, N. T. Duy, and L. T. Hoa, "An Approach to Enhancing User Experience in e-Health Systems," Proceedings of the 10th International Conference on Knowledge and Systems Engineering (KSE), pp. 1–6, Nov. 2018.
[13]	J. Nielsen, "Consistency in UI Design: Principles and Guidelines," Nielsen Norman Group, 2012.
[14]	Stratbeans, "How to Integrate Active Directory in PHP Application for SSO," Stratbeans Tech Blog, 2019.
[15]	S. Sarker, "User Experience Design for Chatbots and Voice Assistants: Principles and Practices," Springer, 2021.