←  All terms
S
Security & Compliance

Single Sign-On

Single sign-on provides access to multiple applications through one central login.

Single sign-on centralizes authentication so users can access multiple connected applications through a single identity provider. This can simplify account management and reduce the need to maintain separate credentials across services. Secure implementation depends on appropriate authentication protocols, clear access controls, and careful integration of participating systems. The concept is closely related to SAML and OpenID Connect.

Read more

SAML

OpenID Connect

SCIM

Role-Based Access Control

FAQ

Single Sign-On

What mistakes happen when introducing single sign-on?
Local accounts often remain alongside SSO and bypass central control. Missing emergency access, wrongly assigned roles, and unclear ownership of certificates add to the list. Without an offboarding process, access persists despite SSO. An access review after rollout reveals such leftovers.
When is single sign-on worthwhile for an organization?
Once many people use several applications and central control is needed, for example for onboarding, offboarding, or compliance requirements. For small teams with few tools, the setup effort often exceeds the gain. Not every application or plan supports SSO. An inventory of the applications in use clarifies the need.
Does single sign-on replace multi-factor authentication?
No, the two complement each other. SSO consolidates the login, while multi-factor authentication adds protection on top. Precisely because one login opens many services, the central access point is sensibly secured with a second factor. Without a second factor, one stolen password can reach every connected application.
What are the benefits and risks of single sign-on?
Benefits are fewer passwords, central revocation of access, and uniform sign-in rules such as multi-factor authentication. The risk: one compromised central account opens many applications, and an outage of the identity service locks everyone out. Protecting the central account therefore takes priority.
Is single sign-on the same as SAML?
No. Single sign-on is the login principle, and SAML is one of the protocols used to implement it. OpenID Connect is an alternative. The selection depends on what the identity service and the applications support, not on the buzzword SSO.