Single sign-on (SSO)

Single sign-on (SSO) is a major aspect of identity and access management (IAM). It is an authentication process that helps users access multiple websites and applications using a single set of sign-in credentials (username and password). SSO is often used in a business context, as the applications are assigned to employees and managed by an internal IT team.

The benefits of SSO:

1. Only one password is required to use SSO, reducing the risks associated with repeated passwords.

2. Once signed in to the SSO service, you don't have to sign in to every application individually. SSO will automatically arrange access to the application you need.

3. Companies can expect fewer help desk calls due to forgotten passwords.

How does SSO work?

1. A user signs in to an SSO service.

2. The SSO service creates an authentication token to associate with the user. This token signifies that the user's identity is verified. Authentication tokens are written using authentication standards, such as SAML or OIDC.

3. Now, any application the user tries to access will check with the SSO service.

4. The SSO service provides the user's authentication token to the applications, confirming the user's identity.

5. The user is granted access to the applications without having to enter their credentials again.