Overview
Direct Answer
Single Sign-On (SSO) is an authentication mechanism that permits users to authenticate once with a centralised identity provider and subsequently access multiple independent applications and systems without re-authenticating. This contrasts with traditional authentication schemes requiring separate credentials for each application.
How It Works
SSO operates through a trusted identity provider that validates user credentials and issues cryptographically signed tokens (commonly SAML, OAuth 2.0, or OpenID Connect). Applications redirect unauthenticated users to this centralised provider; upon successful authentication, the provider returns a token that downstream systems verify and trust, establishing a session without requiring password resubmission.
Why It Matters
Organisations deploy SSO to reduce credential management overhead, minimise password fatigue-related security incidents, and accelerate user onboarding across dispersed systems. Compliance frameworks increasingly mandate centralised authentication auditing, making SSO integral to governance and risk management strategies.
Common Applications
SSO is prevalent in enterprise environments integrating cloud productivity suites with internal applications, healthcare organisations managing access across electronic records systems, educational institutions granting students unified access to learning platforms and institutional resources, and financial services firms coordinating authentication across customer portals and backend systems.
Key Considerations
SSO introduces a critical single point of failure; compromise of the identity provider affects all federated applications. Organisations must carefully balance convenience against security requirements and ensure token expiration policies and revocation mechanisms are appropriately calibrated.
More in Cloud Computing
Spot Instance
Service ModelsA cloud computing option that uses spare capacity at significantly reduced prices with the possibility of interruption.
AI Infrastructure
Service ModelsThe specialised hardware, software, and networking stack required to train and serve AI models at scale, including GPU clusters, high-bandwidth interconnects, and model serving frameworks.
Function as a Service
Service ModelsA serverless cloud computing model where individual functions are executed in response to events.
Platform as a Service
Service ModelsCloud computing model that provides a platform for developers to build, deploy, and manage applications without managing infrastructure.
Container Orchestration
InfrastructureThe automated management of containerised application deployment, scaling, networking, and availability across clusters of machines, with Kubernetes as the dominant platform.
Managed Service
Service ModelsA cloud service where the provider handles infrastructure management, maintenance, updates, and monitoring.
Cloud Migration
Deployment & OperationsThe process of moving data, applications, and workloads from on-premises infrastructure to cloud environments.
Cloud Workload Protection
Strategy & EconomicsSecurity solutions designed to protect server workloads running in cloud environments, providing vulnerability management, runtime protection, and compliance monitoring.