Icologiq Knowledge · Technology
Single Sign-On
An authentication approach that allows a user to use one account and authentication process to access multiple connected applications.
SSO
Also known as:
single sign on, federated sign-on
At a glance
Type
Technology
Topic
Enterprise IT
Applies to
Cross-industry
Current version
Status
Last reviewed
September 14, 2026
Definition
Single Sign-On reduces the need for separate application credentials by allowing identity to be managed through a trusted authentication environment. Implementation details vary by identity provider and protocol, such as SAML or OpenID Connect.
Why it matters
Single Sign-On matters because it can simplify access for users while allowing authentication to be managed centrally. This can reduce password-related administration and support more consistent onboarding, offboarding and access governance.
Users authenticate through the organization's chosen identity provider rather than creating an independent password for every connected application.
Central authentication
•
Protocols such as SAML can pass authenticated identity information securely between the identity provider and service provider.
Federated trust
•
One enterprise sign-in can provide access to multiple authorized services, reducing password fatigue and local credential support.
Reduced sign-in friction
•
Authentication policies such as multifactor authentication and account lockout can be managed centrally where the identity platform supports them.
Central security controls
•
SCIM or another provisioning process can complement SSO by creating, updating and disabling application accounts.
Connect to account lifecycle
•
Technology explained
What Single Sign-On solves—and what it does not
Single Sign-On lets users authenticate through a central identity environment and access connected applications without managing separate passwords for each one. It improves user experience and authentication governance, but application authorization and Least Privilege still require separate control.
An access-control model in which permissions are assigned to organizational roles and users receive access through the roles they are authorized to perform.
Role-Based Access Control
Technology
· Enterprise IT
Security Assertion Markup Language: an XML-based standard for exchanging authentication, attribute and authorization information between systems.
SAML
Technology
· Enterprise IT
Explore further
Related knowledge
Explore related standards, processes and quality-management concepts.
Relevant Icologiq capabilities
Explore the quality processes and platform capabilities connected to this topic.
In practice
Where this matters
See which industries and Icologiq capabilities are most closely connected to this topic.