立即与支持人员聊天
与支持团队交流

Cloud Access Manager 8.1 - Security and Best Practice Guide

Single host certificate

This is typically the cheapest option. It is suitable for organizations who wish to proxy only a single application, or a collection of simple, static web applications with minimal client-side scripting using the folder-to-root method described above.
* 
NOTE: The subject indicated in a single host certificate is a single hostname, for example www.acme.com

Wildcard certificate

This is usually the most costly option, but the most flexible. It allows you to set up unlimited root-to-root proxy mappings by permitting the domain name to be prefixed by any subdomain.
* 
NOTE: The subject indicated in a wildcard certificate is a wildcard hostname, for example *.webapps.acme.com

Subject Alternative Name (SAN) certificate

A SAN certificate authenticates multiple explicitly-defined hostnames, the subjects indicated in a SAN certificate are listed, for example:
DNS Name: erp.acme.com
DNS Name: mail.acme.com
DNS Name: payroll.acme.com
A SAN certificate is widely considered to be more secure than a wildcard certificate. If a wildcard certificate falls into the wrong hands, then an attacker can pose as the legitimate organization through an unlimited number of hostnames. However, a similar compromise of a SAN certificate would only jeopardize the hostnames listed on that particular certificate.
Alternatively, the wildcard certificate has the advantage of flexibility, so you do not need to worry about altering your certificate in the future to accommodate more domain names. For this particular reason, as long as the private key of your wildcard certificate is properly secured, then you may consider the convenience of a wildcard certificate to outweigh the security benefits of a SAN certificate.

Single sign-on methods

Dell™ One Identity Cloud Access Manager offers a variety of ways to automate sign-on to suit all types of web application:
•
Security Assertion Markup Language (SAML) federation and WS-Federation
•
HTTP Basic and NTLM
•
Proxied form-fill
•
Unproxied form-fill
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级