WAM can validate a single domain (for example, uoguelph.ca), multiple domains (for example, uoguelph.ca and resources.xyz), and an entire federation (for example the Canadian Access Federation run jointly by CUCCIO and Canarie). The latter case is sometimes referred to as Federated Access Management (FAM). Single Sign-On is one of the services offered as part of Web Access management
Web Access Management protects web resources and data from unauthorized use in three ways:
- Authentication (that is, validating a user's credentials),
- Authorization (that is, determining whether the validated user is entitled to the requested resources), and
- Auditing (that is, keeping a record of all unauthorized access attempts and policy changes).
There is no charge for this service as it is provided by CCS.