Another solution

In addition to supporting SAML, Minnesota Life has developed its own SSO solution for those clients who do not have SAML capabilities. Called "Trusted Link," this solution can be integrated with virtually any existing employer benefits system. While providing employees seamless access to real-time benefits information, behind the scenes Trusted Link is updating profile information each time a service is requested. Employers find a solution such as Trusted Link appealing because it offers online benefits self-service, without the investment to administer it.

 

 

Aware page banner

Employer focus
Too many passwords? SSO to the rescue

Employee self-service technology can be the key to easing the administrative burden of managing benefit plans. But along with the ability to push out information securely over the web comes the need for authentication and the ever present User ID and password requirement. Multiply that need over many carriers and suddenly the convenience of web-based information is, well, not so convenient.

"Single Sign-On" (SSO) provides an answer to the dilemma of having to remember multiple passwords. Similar to the bill pay option offered by banks, where a user has access to many invoices (utilities, cell phone, etc.) through one portal, SSO gives employees the opportunity to access secure benefits information by logging into an HRIS system once. Simply by clicking on a carrier's link in the system, without having to log in again or retype a password, the employee seamlessly moves to the carrier site to enroll or check their personal account.

Beyond the obvious advantage of eliminating the need for employees to keep lists of passwords, a major security no-no, SSO offers help to benefits administrators. It centralizes record keeping, keeps compliance responsibility with the vendor and reduces staff time spent dealing with forgotten IDs and passwords.

Case in point: "Single Sign-On made enrollment at PepsiCo much smoother, easier and user-friendly, which in turn helped increase total enrollment in the Group Universal Life insurance plan offered by Minnesota Life," attests Lauren Dahling, PepsiCo Benefits Administrator.

How is it done?

Currently there are two primary ways of implementing SSO: Security Assertion Markup Language (SAML) or proprietary vendor-developed solutions. Choosing the right one depends on the employer and vendor's technical resources for implementation.

The technology industry standard, SAML, is a process created specifically for user authentication to support secure sign on between companies and their affiliate partners or vendors. An alternative option for SSO has been developed by innovative vendors who recognize not all of their clients have SAML capabilities. The table below lists some factors to help an organization decide which approach may be best for their situation.

SAML may be a good fit if. Vendor SSO may be a good fit if.
  • Your organization already leverages SAML for other SSO connections
  • You have secure connections with many vendors or partners
  • You and your partners both want to use industry standards
  • You don't currently leverage SAML within your organization and you are trying to keep short-term costs low
  • You have few partners that require a secure connection
  • Your partners don't support SAML

Single Sign-On is quickly becoming the norm both in and outside the benefits industry. By choosing vendors who support SSO, employers are able to offer employees more convenient access to benefit information while reducing their own administrative costs. To learn how Minnesota Life can help improve your employees' online experience through SSO, contact your client relationship advisor or regional group sales manager.