Why Is Single Sign-On (SSO) Important? | OneLogin (2024)

Home / Identity and Access Management 101 / Why is single sign-on important?

Single sign-on (SSO) in the enterpriserefers to the ability for employees to log in just one time with one set ofcredentials to get access to all corporate apps, websites, and data for whichthey have permission. SSO solves key problems for the business by providing:

• Greater security and compliance.
• Improved usability and employee satisfaction.
• Lower IT costs.

The proliferation of cloud apps and services in the enterprise—oftenin addition to on-prem ones—has created a significant fragmentationproblem. Fragmentation in the enterprise is a challenge for IT and users. ITmust manage the many apps in the enterprise, as well as deal with shadow IT. Employees have touse more and more apps each day just to complete their work, which meanslogging in to and switching between multiple apps and websites.

SSO helps to solve the enterprise fragmentation problem.

Usernames and passwords are the main target of cybercriminals. Every time auser logs in to a new application, it’s an opportunity for hackers. SSOreduces the number of attack surfaces because users only log in once each dayand only use one set of credentials.

Reducing login to one set of credentials improves enterprisesecurity. When employees have to use separate passwords for each app,they usually don’t. In fact, 59% use the same or similar passwords onmultiple accounts. Thus, if a hacker gets access through one poorly securedwebsite, they are likely to be able to access other corporate systems.

SSO helps with regulatory compliance, too.Regulations, such as Sarbanes-Oxley, require that IT controls are documentedand that organizations prove that adequate methods are in place to protectdata. SSO is a way to meet requirements around data access and antivirusprotection.

SSO can also help with regulations, like HIPAA, that require effectiveauthentication of users who are accessing electronic records or who requireaudit controls to track activity and access. Regulations, like HIPAA, alsorequire automatic logoff of users, which most SSO solutions enable.

When SSO is part of an identity and access management(IAM) solution, it utilizes a central directory that controls user accessto resources at a more granular level. This allows organizations to complywith regulations that require provisioning users with appropriate permissions.UAM systems enable SSO with role-based access control (RBAC) and securitypolicies. This type of SSO solution also deprovisions users quickly—oreven automatically—another common compliance requirement meant to ensurethat former employees, partners, or others can’t access sensitive data.

With the move to the cloud, employees are using more and more apps in theworkplace. Requiring separate usernames and passwords for each app is a hugeburden for employees and, frankly, is unrealistic. Single sign-on reduces thatcognitive burden.

Signing in once also saves time, thus improvingemployee productivity. Given that 68% of employees switch between tenapps every hour, eliminating multiple logins can save a company considerabletime and money.

SSO solutions that are part of an identity and access management systemusually have an app portal. To use an app, employees select it from theportal. If the user doesn’t have an app, he or she can request itthrough the portal and it’s added with SSO enabled. It all happensquickly, so users who might be discouraged from requesting or using apps aremore likely to use them.

SSO lowers IT costs by saving time on password resets. When apps each require a different username and password for every employee, chances are high that employees will forget passwords—and that means help tickets for password resets pile up.

With SSO, users have only one set of credentials to remember, reducing the number of help tickets. And most SSO solutions allow users to reset their passwords themselves, eliminating the need for IT involvement.

SSO that is part of a unified access management system takes advantage of a central directory to provision and deprovision users, making the process faster and cheaper. Policies can be defined based on user role, location, and other user traits. And employees, partners, and customers can be quickly provisioned across multiple applications in one action, rather than having to separately provision each application. Similarly, IT saves time on deprovisioning, which can be done in minutes instead of hours.

When enterprises implement a quality SSO solution, it adds security, improves usability, and saves time and money for the IT department.

Try It Now