Overview
Direct Answer
Single Sign-On (SSO) is an authentication mechanism that permits users to authenticate once with a centralised identity provider and subsequently access multiple independent applications and systems without re-authenticating. This contrasts with traditional authentication schemes requiring separate credentials for each application.
How It Works
SSO operates through a trusted identity provider that validates user credentials and issues cryptographically signed tokens (commonly SAML, OAuth 2.0, or OpenID Connect). Applications redirect unauthenticated users to this centralised provider; upon successful authentication, the provider returns a token that downstream systems verify and trust, establishing a session without requiring password resubmission.
Why It Matters
Organisations deploy SSO to reduce credential management overhead, minimise password fatigue-related security incidents, and accelerate user onboarding across dispersed systems. Compliance frameworks increasingly mandate centralised authentication auditing, making SSO integral to governance and risk management strategies.
Common Applications
SSO is prevalent in enterprise environments integrating cloud productivity suites with internal applications, healthcare organisations managing access across electronic records systems, educational institutions granting students unified access to learning platforms and institutional resources, and financial services firms coordinating authentication across customer portals and backend systems.
Key Considerations
SSO introduces a critical single point of failure; compromise of the identity provider affects all federated applications. Organisations must carefully balance convenience against security requirements and ensure token expiration policies and revocation mechanisms are appropriately calibrated.
More in Cloud Computing
Platform Engineering
Deployment & OperationsThe practice of building and maintaining internal developer platforms that provide self-service capabilities, standardised tooling, and golden paths for software delivery teams.
Service Mesh
Architecture PatternsAn infrastructure layer handling service-to-service communication in microservices, managing traffic, security, and observability.
Internal Developer Portal
Deployment & OperationsA centralised web interface that provides developers with self-service access to infrastructure, services, documentation, and templates within their organisation.
GraphQL
Architecture PatternsA query language for APIs that lets clients request exactly the data they need in a single request.
Microservices
Architecture PatternsAn architectural style structuring an application as a collection of loosely coupled, independently deployable services.
Spot Instance
Service ModelsA cloud computing option that uses spare capacity at significantly reduced prices with the possibility of interruption.
Infrastructure as a Service
Service ModelsCloud computing model providing virtualised computing resources like servers, storage, and networking over the internet.
Cloud Computing
Service ModelsThe delivery of computing services — servers, storage, databases, networking, software — over the internet on demand.