Single Sign-On (SSO)

Single sign-on allows the user to be automatically authenticated by multiple applications, resources or websites with a single authenticationPrimary or secondary authentication Authentication allows a user to guarantee his or her identity before accessing a resource or service. Primary authentication will give user access to the workstation (Windows… More. When the user connects to one of these resources, the authentication step having already been validated, the system gives the user direct access.
The interest is in particular to free the user from the management of his multiple passwords, and to apply much more robust security policies (increased password complexity level, regular password rotation).
Within a corporate network or for mobile employees, single and universal authentication solutions exist that allow access to web applications but also to business applications. These solutions do not require applications to be compatible with specific protocols and adapt to the different cases that organizations may encounter.
There are also identity federation mechanisms that enable single sign-on beyond the organizations themselves. These mechanisms require making different applications compatible with different protocols (SAML) or different federation systems (Shibboleth).