100% found this document useful (1 vote)
586 views4 pages

Single Sign On

Single sign-on (SSO) allows a user to log in once and gain access to multiple independent systems without additional logins. Conversely, single sign-off terminates access to all linked systems with one logout action. SSO internally translates credentials between systems to enable authentication across different mechanisms. Key advantages are reduced passwords and login times, lower help desk costs. Risks include greater impact if credentials are compromised and increased criticality of the authentication system due to centralized access control.

Uploaded by

Amindra De Silva
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
586 views4 pages

Single Sign On

Single sign-on (SSO) allows a user to log in once and gain access to multiple independent systems without additional logins. Conversely, single sign-off terminates access to all linked systems with one logout action. SSO internally translates credentials between systems to enable authentication across different mechanisms. Key advantages are reduced passwords and login times, lower help desk costs. Risks include greater impact if credentials are compromised and increased criticality of the authentication system due to centralized access control.

Uploaded by

Amindra De Silva
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 4

Single sign-on

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them. Conversely, single sign-off is the property whereby a single action of signing out terminates access to multiple software systems.

As different applications and resources support different authentication mechanisms, single sign-on must internally translate and store credentials for the different mechanisms, from that used for initial authentication. Example :- Microsoft .Net Passport

Single sign-on
Advantages
Reducing password fatigue from different user name and password combinations Reducing time spent re-entering passwords for the same identity Reducing IT costs due to lower number of IT help desk calls about passwords

Disadvantages
As single sign-on provides access to many resources once the user is initially authenticated ("keys to the castle") it increases the negative impact in case the credentials are available to other persons and misused. Therefore, single sign-on requires an increased focus on the protection of the user credentials, and should ideally be combined with strong authentication methods like smart cards and one-time password tokens. Single sign-on also makes the authentication systems highly critical; a loss of their availability can result in denial of access to all systems unified under the SSO.

How .NET Passport Works?

How .NET Passport Works?


1. Initial resource request 2. Redirect to passport 3. Passport authentication request 4. Authentication response 5. Authenticated resource request 6. Content delivery.

You might also like