Home > Cybersecurity glossary > Single sign-on (SSO)

Single sign-on (SSO)

L'single sign-on (in English, Single Sign-On or SSO) is a system that allows a user to connect to several applications or services using a single authentication, i.e. a single set of identifiers (username and password).

Advantages of single sign-on:

  • Simplified password management : no need to memorise many different passwords.
  • Improving the user experience : faster, easier access to applications.
  • Increased safety : Reduced risk of password input errors and account hacking.
  • Centralised identity management : makes it easier to manage access and authorisations.

Examples of use :

  • Companies: allows employees to access their various work tools (email, intranet, business software) with a single account.
  • Online services : Many online services now offer single sign-on to make it easier for users to log in (social networks, streaming platforms, etc.).

Associated risks :

Although very practical, single sign-on does present certain risks:

  • Single point of failure : if the SSO system is compromised, all linked accounts may be compromised.
  • Phishing : Users may be encouraged to provide their login details to a fake site.
  • Session hijacking : an attacker can steal the session of an authenticated user.
Towards the ORSYS Cyber Academy: a free space dedicated to cybersecurity