MILNET SSO // SECURE ACCESS SYSTEM

--
Users
--
Devices
--
Portals
--
Audit Entries
--
Your Tier

// TOKEN CLAIMS

No active token

// REGISTER USER

// REGISTER PORTAL

// REGISTERED PORTALS

// ENROLL DEVICE

// SSO PORTAL SIMULATOR

Click "Access" on any portal below. Your current SSO token is evaluated against each portal's tier and scope requirements. Same token, multiple services -- that is SSO.

// AUDIT LOG

// SECURITY VERIFICATION DEMO

These demonstrations prove the cryptographic security properties of the SSO system. Each test modifies or misuses a token and shows the system correctly rejecting it.

1. Token Tampering Detection

Flips a single bit in the token signature. The server detects the modification and rejects it.

2. Token Expiry Enforcement

Forges a token with an expiry time in the past. The server rejects expired tokens.

3. Tier Enforcement

Attempts to access a Tier 1 (Sovereign) restricted portal. Lower tier number = higher privilege. Access is denied if your tier is too low (higher number).

4. Scope Enforcement

Attempts an admin-scoped action with a read-only token. The system enforces least privilege.