What is SSO
Single Sign-On — one login for multiple systems
SSO (Single Sign-On) is an authentication technology that allows users to access multiple systems with a single login.
How It Works
- User authenticates once
- Receives an authentication token
- Token is used to access all connected systems
- Centralized session management
SSO Protocols
- SAML 2.0 (Security Assertion Markup Language)
- OAuth 2.0 / OpenID Connect
- Kerberos
- LDAP
- CAS (Central Authentication Service)
Benefits
- User convenience — one password
- Enhanced security — fewer passwords to manage
- Simplified administration
- Single audit point
- Fast employee onboarding/offboarding
Applications
- Corporate portals
- Cloud services (Google Workspace, Microsoft 365)
- Enterprise internal systems
- SaaS applications
Risks and Protection
- SSO compromise = access to all systems
- Important: MFA (multi-factor authentication)
- Anomaly activity monitoring
- Regular key rotation