What is single sign-on, and does it improve security?
Single sign-on (SSO) lets people sign in once with a company account from an identity provider and then use many applications without separate passwords, usually through the SAML or OpenID Connect standards. Done well, it improves security: fewer passwords to reuse or steal, one place to enforce multi-factor authentication and device rules, one place to see sign-ins, and one switch to turn off when someone leaves, which closes access to every connected application at once. The flip side is concentration: the identity provider becomes the key to everything, so protect its admin accounts with phishing-resistant MFA, keep an emergency access account sealed, and watch its sign-in logs. Applications outside SSO keep their own passwords; list them so that offboarding does not miss them. SSO is identity infrastructure, not network monitoring, and NetSenX does not see sign-ins. It shows what devices do on the network after anyone signs in.
Read next
Related questions
- How do we monitor an external accountant's remote access to our PCs?
- What happens if our outsourced IT provider or bookkeeper is hacked?
- How do I find old remote-access tools that suppliers left on our servers?
- How do we control and monitor third-party vendor access to our network?
- What does NIS2 supply-chain security mean in practice for a small company?
← All 45 questions on Zero trust, identity and segmentationAll topics