The service authenticates the access privileges for all the applications a user has
rights to and requires no additional actions when switching between them. The
application server gathers the user’s credentials from a dedicated SSO policy server
and checks the person against a user directory.
There are many advantages in SSO
Reduces password fatigue.Remembering one password instead of many
makes users’ lives easier. As a tangential benefit, it gives users greater incentive
to come up with strong passwords.
Simplifies username and password management."When changes of
personnel take place, SSO reduces both IT effort and opportunities for mistakes.
Employees leaving the organization relinquish their login privileges.
Increases speed where it is most needed.In settings such as hospitals,
defense industries, and emergency services, where large numbers of people and
departments demand rapid and unfettered access to the same applications, SSO
is especially helpful. In such cases, preventing errors and malware intrusion can
be the difference between life and death."
Relieves help desk workloads."Fewer users calling for help with lost passwords
saves money and improves security."
Reduces security risks for your customers, vendors, and partner
entities.Connections between allied companies always present vulnerabilities,
which SSO can reduce.
With Advantages comes Disadvantages
If a hacker breaches your identity provider user account, all your linked
systems could be open to attack."This can be a classic single point of failure
and should be headed off in the planning process. On the plus side, high-quality
identity providers have top-notch security.
SSO can take longer than expected to set up."Each environment is different,
so added steps in implementation can crop up. One example is the task linking
the identity provider to the service provider.
SSO is risky for multi-user computers."What happens when one user is
logged in and another needs to use the machine?
Reduced sign-on (RSO) may be needed to accommodate different levels
of access.With RSO, additional authentication servers may be required."
SSO using social networking services can create conflict."This can be the
case with workplaces that block social media sites and government connections
where censorship is involved."
Some SSO-linked sites may give their user data to third-party
entities.This is an area requiring careful attention.
Lee, B. (2022). Single Sign-On (SSO) Pros & Cons - JumpCloud. Retrieved 4 February
2022, from"https://jumpcloud.com/blog/sso-pros-cons
