Single sign-on (SSO)

What is single sign-on (SSO)?

Single sign-on (SSO) is a login method where users authenticate once centrally and then use multiple applications without signing in again. Identity is managed via a central identity provider.

How does SSO work?

A central identity provider confirms the identity to the connected services, usually via standards such as SAML 2.0 or OpenID Connect. The applications trust this confirmation and grant access.

What benefits does SSO offer?

Fewer passwords, simpler login, central rights management and faster offboarding. Combined with MFA, SSO improves both security and usability.

How SecureCloud supports SSO

SecureCloud supports single sign-on in Advanced Access Management via common standards and can be combined with multi-factor authentication and role-based access control.

What is the difference between SSO and a password manager?

A password manager stores many individual passwords. With single sign-on there is one central login via an identity provider, so separate passwords per application are no longer needed.

Is SSO secure?

SSO increases security when the central login is protected with multi-factor authentication. Without MFA, the central login becomes a critical point.

Which standards does SSO use?

Common ones are SAML 2.0, OpenID Connect (OIDC) and OAuth 2.0, through which the identity provider confirms identity to the applications.