Data Structure
Networking
RDBMS
Operating System
Java
MS Excel
iOS
HTML
CSS
Android
Python
C Programming
C++
C#
MongoDB
MySQL
Javascript
PHP
Physics
Chemistry
Biology
Mathematics
English
Economics
Psychology
Social Studies
Fashion Studies
Legal Studies
- Selected Reading
- UPSC IAS Exams Notes
- Developer's Best Practices
- Questions and Answers
- Effective Resume Writing
- HR Interview Questions
- Computer Glossary
- Who is Who
What is Single Sign On (SSO)?
Single sign-on (SSO) is a meeting and client validation administration (service) that allows a client to utilize one lot of login certifications - for instance, a name and secret key - to get to numerous applications.
SSO can be utilized by endeavours, littler associations, and people to facilitate the administration of different usernames and passwords.
In an essential web SSO administration, an operator module on the application server recovers the particular validation qualifications for an individual client from a committed SSO arrangement server, while confirming the client against a client storehouse,
An example of SSO is a Lightweight Directory Access Protocol (LDAP) registry. The administration confirms the end-client for all the applications the client has been offered rights to and wipes out future secret phrase prompts for singular applications during a similar meeting.
SSO Architecture
The architecture of SSO is explained below −
Single sign on architecture is an authentication mechanism which means using the same set of credentials for multiple applications.
Users must be logged in the identity provider's application to use the single sign on feature. Then the user can use it to sign in various applications that enable this architecture.
When a user tries to access an application using SSO, the identity provider sends a certificate to the application. This certificate ensures that the user is valid and authenticated.
The SSO architecture is shown in the diagram below −
Advantages
The advantages of SSO are as follows −
No need for creating accounts for each and every application.
No need for creating password credentials for each and every application.
Users do not need to remember the user id and passwords of each and every application.
It prevents keylogging attacks as the user does not need to enter a password.
536 Views
