Overview
Direct Answer
Single Sign-On (SSO) is an authentication mechanism that permits users to authenticate once with a centralised identity provider and subsequently access multiple independent applications and systems without re-authenticating. This contrasts with traditional authentication schemes requiring separate credentials for each application.
How It Works
SSO operates through a trusted identity provider that validates user credentials and issues cryptographically signed tokens (commonly SAML, OAuth 2.0, or OpenID Connect). Applications redirect unauthenticated users to this centralised provider; upon successful authentication, the provider returns a token that downstream systems verify and trust, establishing a session without requiring password resubmission.
Why It Matters
Organisations deploy SSO to reduce credential management overhead, minimise password fatigue-related security incidents, and accelerate user onboarding across dispersed systems. Compliance frameworks increasingly mandate centralised authentication auditing, making SSO integral to governance and risk management strategies.
Common Applications
SSO is prevalent in enterprise environments integrating cloud productivity suites with internal applications, healthcare organisations managing access across electronic records systems, educational institutions granting students unified access to learning platforms and institutional resources, and financial services firms coordinating authentication across customer portals and backend systems.
Key Considerations
SSO introduces a critical single point of failure; compromise of the identity provider affects all federated applications. Organisations must carefully balance convenience against security requirements and ensure token expiration policies and revocation mechanisms are appropriately calibrated.
More in Cloud Computing
Cloud Repatriation
Strategy & EconomicsThe process of moving workloads back from public cloud environments to on-premises or private cloud infrastructure.
Cloud Migration
Deployment & OperationsThe process of moving data, applications, and workloads from on-premises infrastructure to cloud environments.
Availability Zone
InfrastructureAn isolated location within a cloud region with independent power, cooling, and networking for high availability.
Edge Computing
Architecture PatternsProcessing data near the source of data generation rather than in a centralised cloud data centre.
Cloud Orchestration
Service ModelsThe automated arrangement, coordination, and management of complex cloud computing systems and services.
Region
InfrastructureA geographic area containing one or more data centres where cloud services are hosted.
AI Infrastructure
Service ModelsThe specialised hardware, software, and networking stack required to train and serve AI models at scale, including GPU clusters, high-bandwidth interconnects, and model serving frameworks.
gRPC
Architecture PatternsA high-performance remote procedure call framework developed by Google using Protocol Buffers for serialisation.