Safeguards
Single sign-on
What is single sign-on (SSO)?
Single sign-on (SSO) is one central login for many applications: staff sign in once, ideally with a second factor, and reach every app they are allowed to use.
The biggest security gain is offboarding. Without SSO, access must be removed app by app and some gets forgotten. With SSO you disable one account and every connected app is closed.
SSO uses standards such as OpenID Connect or SAML; older software can often connect via LDAP or a proxy. The sign-in service is called an identity provider and can run in the cloud or in-house.
Because everything depends on sign-in, the identity provider must be highly available and well protected.
All terms in the knowledge base
Legal notice: We are engineers, not lawyers: we cannot and will not make any statements on legal questions. This entry is purely technical, reflects the state of knowledge to the best of our understanding, and is not legal advice; it does not replace review by a qualified lawyer. No guarantee is given as to correctness or completeness; liability arising from the use of this information is excluded to the extent permitted by law. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu. AI transparency: parts of this entry may have been created with AI assistance, so errors are possible despite review: please report errors here · how we create content.
From the term to practice
Where does your business actually stand?
The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT.
office [at] vetosec [dot] at · vetosec.at/contact/
