🔑
Single Sign‑On (SSO)
Authentication
Authentication scheme where one identity session grants access to multiple relying parties via tokens.
Definition
SSO uses a central identity provider to authenticate users and issue tokens/assertions to multiple services. It simplifies account management and enables consistent MFA and policy enforcement.
In plain English
Authentication scheme where one identity session grants access to multiple relying parties via tokens.
Why this matters
Why it matters: Centralization reduces password reuse but creates a high-impact failure point; privacy depends on attribute minimization and logging controls.
Example
Example: Enforce MFA at the IdP and limit shared attributes per application (just-in-time provisioning).