WSO2 Identity Cloud allows SSO for custom applications that use various agent types such as SAML, OpenID Connect and WS-Federation.
The following diagram illustrates the process that is followed for authentication to an agent-based custom application once this configuration is done with the WSO2 Identity Cloud.
Figure: Accessing an agent-based custom application using Identity Cloud
The above diagram illustrates how a user accesses the agent-based custom application in the User Portal of the WSO2 Identity Cloud. The custom application sends an authentication request to the Identity Cloud using the protocol based on agent type (SAML, OpenID Connect or WS-Federation). The Identity Cloud sends an authentication response and the user is able to log in to the custom application.
In WSO2 Identity Cloud, configuring Agent-based SSO can be done using the following ways: