Authentication and Federation Standards

LLN Robot uses secure, standards-based authentication to protect all user accounts and assessment data.

• TLS 1.2+ encryption for all authentication traffic
• Passwords are salted, hashed, and stored securely
• MFA enforced for administrative access
• Role-based access control (RBAC) to restrict user permissions

• Session management aligned with OWASP recommendations

  At present, LLN Robot does not natively provide single sign-on (SSO) via Microsoft Entra ID (Azure AD), SAML 2.0, or OpenID Connect. Integration with external identity providers requires a custom approach.

  We are actively developing the next major release of LLN Robot, planned for the second quarter of next year, which will include SSO support and SCIM provisioning for compatible identity platforms, including Microsoft Entra ID.