What is Single Sign-On (SSO)? - Definition & Meaning
Single Sign-On (SSO) is an authentication method that allows users to access multiple applications with one set of credentials. Learn how SSO works.
Definition
Single Sign-On (SSO) is an authentication method where users sign in once with an identity provider and then automatically gain access to multiple linked applications without having to log in again. This improves both user experience and security.
Technical Explanation
SSO is implemented via protocols such as SAML 2.0 (Security Assertion Markup Language), OAuth 2.0, and OpenID Connect (OIDC). The identity provider (IdP), like Okta, Azure AD, or Google Workspace, manages authentication and issues tokens. Service providers (SPs) trust these tokens to grant user access. SAML uses XML-based assertions, while OIDC works with JSON Web Tokens (JWTs). Just-in-time provisioning automatically creates user accounts in the service provider on first login. SCIM (System for Cross-domain Identity Management) synchronizes user data between IdP and SPs.
How Refront Uses This
Refront supports SSO via SAML 2.0 and OpenID Connect, allowing organizations to connect their existing identity provider (Azure AD, Okta, Google Workspace). Team members log in with their existing corporate account and are automatically assigned the correct role and permissions. This simplifies user management and increases security.
Examples
- •Employees log in via their Azure AD account and automatically get access to Refront without creating a separate password.
- •When onboarding a new team member, the account is automatically created in Refront via just-in-time provisioning from Okta.
- •When an employee leaves the company, access to all linked applications, including Refront, is centrally revoked via the IdP.
Frequently Asked Questions
What are the benefits of SSO?
SSO reduces the number of passwords users need to remember, lowers the risk of password-related security incidents, simplifies user management, and improves productivity by eliminating repeated logins.
Is SSO more secure than regular login?
Yes, because it reduces the number of passwords and security policies are centrally managed. Combined with MFA on the identity provider, a high security level is achieved. The risk is that the IdP becomes a single point of failure, but this is mitigated by properly securing the IdP.
Which SSO protocols are most commonly used?
SAML 2.0 is the standard for enterprise SSO, while OpenID Connect (OIDC) is popular for modern web applications. OAuth 2.0 is primarily used for authorization. Most enterprise identity providers support all three protocols.
Ready to get started?
Try Refront for free and discover how AI automates your workflow.