Auth Srv
App Srv
CorSSO Protocol
SN
0
1
Client presents
authentication token
to services, along
with proof of
possession of key kU
“ says that
 kU speaks for U,
 and I possess kU”
U
Principal