Single Sign-On (SSO)
What is Single Sign-On (SSO)?
An authentication scheme that allows a user to log in with a single set of credentials to access multiple, independent software systems. SSO improves user experience while centralising authentication control.
Terms that appear alongside single sign-on (sso)
Each of these is named in at least one of the same controls as single sign-on (sso). The number is how many controls name both.
- single sign on 5 shared controls
- oauth 4 shared controls
- saml 4 shared controls
- authentication 4 shared controls
- zero trust 3 shared controls
- role based access control 3 shared controls
- privileged access management pam 3 shared controls
- multi factor authentication 3 shared controls
Frameworks that govern single sign-on (sso)
What the standards actually require on single sign-on (sso)
Requirements naming single sign-on (sso) across 4 standards, quoted from the control text.
Use single sign-on so users authenticate once to reach applications and data across cloud and on-premises environments rather than maintaining separate credentials per application.
ASBv3-IM-5 · Use single sign-on (SSO) for application access →ISMAP Identity and Access Management requires comprehensive IAM controls covering customer + CSP + administrative + service-to-service identities.
ISMAP-Identity-Access-MFA-Privileged-Federation-SSO-API-Tokens-CloudIAM-PIV-PASETO · ISMAP Identity and Access Management - Cloud IAM + Multi-Factor Authentication + Privileged Access + Federation/SSO + API Security + Access Tokens + My Number Card Integration + Government IAM →Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control guards network resources against use without authorization, admitting only authorized staff or devices to services, applications, information flows, stored information and network element...
X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →Apply Section 7.3 identity and access in cloud including: federated identity (SAML 2.0 + OAuth 2.0 + OIDC + WS-Federation) with an identity provider (IdP) + MFA (FIDO2 + WebAuthn + TOTP + biometric) + Single Sign-On (SSO) + risk-based authentication.
NISTSP144-5 · Identity and Access in Cloud, Federation, and Privileged Access →Questions people ask about single sign-on (sso)
What is Single Sign-On (SSO)?
Why is Single Sign-On (SSO) important for compliance?
Which compliance frameworks address Single Sign-On (SSO)?
Where can I learn more about Single Sign-On (SSO)?
See how Single Sign-On (SSO) applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.