1. A client logs into the CRM portal to add some information related to a deal.
2. Since SSO is enabled, when the client accesses the project management tool, they don't need to enter their credentials again. They are automatically logged in.
3. The same applies for when they want to access the design tool to check a prototype. Logging into the CRM portal ensures that they can access these other apps without entering their credentials again.
4. The same applies if the client had logged into the project management tool first. When they access the CRM portal, they are automatically logged in.
   

What is SAML-based SSO?

SAML-based Single Sign On (SSO) is a quicker way of authenticating users who work with multiple apps or services. It is commonly used by businesses where a central IT team manages employees' access to multiple tools. 

Without SSO, employees must log in to each app or service. They must remember multiple credentials or use the same one for multiple apps. This affects user experience and security, as a compromised app could expose other apps' credentials. In addition, it is difficult for the Central IT team to manage user access to multiple apps and enforce security policies.

With SSO enabled, the employee needs to log in just once to the IdP. Once logged in, they have access to all the apps or services linked to the IdP. The Central IT team can manage access using the IdP. Since IdPs are specialized for authentication, they tend to be more secure as well.

The user can access multiple apps and services because the IdP communicates the authentication to the SPs (apps and services the user wants to access). If the communication between the IdP and the SP is in the form of SAML messages, the SSO is called SAML-based SSO. The most common flow looks like this:

1. User tries to access an app (SP).
   
   
2. The SP asks the IdP to authenticate the user.
   
   
   
   
3. The IdP authenticates the user. If the user is not logged in to the IdP, then the user is asked to do so.
   
   
   
   
4. The IdP send a SAML assertion to the SP.
   
   
   
   
5. The SP provides access to the user.
   
   

Some benefits of using the SAML-based SSO method of authentication are:

1. Ease of remembering and managing login credentials
2. Simplified login process for portal users
3. Enhanced security due to centralized access control
4. Reducing the risk of password-related vulnerabilities
5. Ease of managing user access and permissions from a centralized identity management system
   

Next steps

For instructions on how to enable SAML-based SSO for your CRM portal, please see Configuring SAML-based SSO in CRM Portal.

See also

For learning more about setting up CRM portals, see: Setting up Portals and Inviting Users.