What is SSO?
Single Sign-On, a session and user-authentication scheme that lets one login grant access to multiple independent applications.
Also known as: single sign-on
Single Sign-On consolidates "log in once, then access everything" by delegating authentication to a central identity provider. Instead of every app keeping its own password database, the user authenticates once with the IdP (Okta, Azure AD, Google Workspace) and downstream apps trust a signed token (SAML assertion or OIDC ID token) that names the user.
For users, SSO means fewer passwords and faster onboarding. For IT, it means a single revocation point: deactivate the IdP account and access to every connected SaaS tool stops within a session lifetime. For SaaS vendors, "SAML/OIDC SSO" is a checkbox feature that gates enterprise deals because procurement teams will not buy software they cannot revoke centrally.
SSO is sometimes confused with social login ("Sign in with Google") which is technically the same protocol family (OIDC) but with public IdPs. Enterprise SSO is the same plumbing pointed at a corporate IdP, with provisioning, group-based access, and audit logs that a consumer flow does not need.
In the wild
- An employee logging into Slack, Notion, and Figma after one Okta authentication
- A B2B SaaS gating "SSO" behind an Enterprise plan so it can charge more
- A user provisioning script that creates accounts on demand the first time someone arrives via SAML