What is single sign-on (SSO)?
Single sign-on (SSO) is an authentication method that lets users log in once with one set of credentials and access multiple applications without signing in again. An identity provider verifies the user and passes a trusted token to each app using protocols like SAML or OpenID Connect.
How it works
- User opens an app.
- App redirects to the identity provider.
- User signs in (often with MFA).
- Identity provider sends a token.
- App grants access.
Protocols
| Protocol | Common use |
|---|---|
| SAML | Enterprise web apps |
| OpenID Connect | Modern web and mobile |
| OAuth 2.0 | Authorization for APIs |
Benefits
Fewer passwords, central control and faster offboarding.
