7. vCloud Security Examples : 7.2 Single Sign-On (SSO) – Consumer : 7.2.2 Use Case : 7.2.2.4. Delegation and Renew
   
7.2.2.4. Delegation and Renew
Delegation and renew defines scheduling a long-lived task. Some long running operations in the infrastructure require long running tasks to be executed in the absence of the end user who has initiated them. The SSO server supports such tasks using delegated and renewable tokens. After a long running task has been identified, the UI obtains from the SSO server a delegated and renewable token. It passes that token to the solution, which performs that long running task. The solution persists the token in a non-secured way, as the token is self-secured. Each time the task gets activated, the solution reads the token from the disk and goes to the SSO server to renew it. By going to the SSO server for the renewal, the solution has the guarantee that the user has not previously deleted it from the system. This use case is illustrated in the following figure.
Figure 41. Single Sign-On for Long-Lived Tasks