Glossary
What is SSO?
Single Sign-On
Definition
SSO — single sign-on — lets a user authenticate once with the organisation’s identity provider and access several applications without separate passwords.
How SSO works
The application (an ERP, for instance) delegates authentication to the organisation’s identity provider. The user signs in once, and the provider tells the application who they are using standards such as SAML 2.0 or OpenID Connect.
Benefits
- Fewer passwords, and therefore stronger ones
- Instantly revoking a leaver’s access to every application
- Consistently enforcing policies such as MFA
Consideration
The identity provider becomes a critical point and must itself be protected with MFA and monitoring.
Example
An employee who leaves is disabled once in the identity provider, and their access to the ERP, email and other systems closes at the same moment.
SSO in Fidar
Enterprise SSO over SAML 2.0 and OIDC is supported (Enterprise plan). See security and access.
Updated: