Single sign-on authenticates users through a central identity provider, so they access connected applications without separate credentials for each. Common protocols include SAML and OpenID Connect.
It centralizes password policy, multi-factor enforcement, and account deprovisioning.
Alternative Names:
SSO, Federated Authentication
Why it Matters?
The security value is deprovisioning as much as convenience. When someone leaves a firm, disabling the central account cuts access to every connected system at once, while separately credentialed applications leave orphaned accounts that persist indefinitely. For legal vendors, SSO support is effectively a requirement in enterprise procurement, and its absence signals a product built for individual rather than institutional buyers.
Frequently Confused with
Related terms
Frequently asked questions
What is the main security benefit of SSO?
Does SSO replace multi-factor authentication?
