Home > Glossary > Certified in Cybersecurity > Single Sign-On (SSO)

📖 What is Single Sign-On (SSO)?

A session and user authentication service that allows a user to use one set of login credentials to access multiple applications.

🥋 Sensei Says:

"Great for user experience, but it creates a single point of failure. Protect SSO with MFA!"

📚 Certification: Certified in Cybersecurity (CC)

🔑 What are the Key Concepts of Single Sign-On (SSO)?

▸ SSO centralizes authentication, improving user experience by reducing password fatigue and streamlining access to resources.
▸ Common SSO protocols include SAML, OAuth 2.0, and OpenID Connect, each with different strengths and use cases.
▸ A single point of failure is a major risk with SSO; robust security measures like MFA and high availability are crucial.
▸ SSO integrates with identity providers (IdPs) to verify user credentials and manage access policies effectively.
▸ Federated identity allows SSO to extend trust relationships across organizational boundaries, enabling cross-domain access.

🎯 How does Single Sign-On (SSO) appear on the CC Exam?

You may be asked to identify the security risk introduced by implementing SSO without multi-factor authentication (MFA) and explain how MFA mitigates that risk.

A scenario might describe a company migrating to a cloud-based application and needing to integrate it with their existing on-premises SSO infrastructure – determine the appropriate protocol.

Expect questions about troubleshooting SSO failures, including issues related to certificate validation, clock synchronization, and IdP configuration.

❓ Frequently Asked Questions

What's the difference between SSO and federated identity?

SSO focuses on a single organization's resources, while federated identity extends trust across multiple organizations, allowing users to access resources in different domains with one set of credentials.

How does SSO impact the principle of least privilege?

SSO doesn't inherently impact least privilege, but it *enables* better enforcement. Centralized access control policies within the SSO system can precisely define user permissions for each application.

Can SSO be used with legacy applications that don't support modern authentication protocols?

Yes, through the use of SSO proxies or agents. These act as intermediaries, translating between the legacy application's authentication methods and the SSO protocol, enabling seamless integration.

Related Terms from Certified in Cybersecurity

Physical Controls Discretionary Access Control (DAC) Network Address Translation (NAT) Data Loss Prevention (DLP) Security Standard Security Information and Event Management (SIEM)

📝 Related Study Guides

Study Guide 8 min read

ISC2 CC Certification Guide: Your Free Entry into Cyber

The ISC2 Certified in Cybersecurity (CC) is a free, entry-level certification designed for beginners. It covers five core domains—Security Principles, BCP/DR, Access Control, Network Security, and Security Operations—via a 100-question exam. It's the ideal starting point for career changers to build a foundation without financial barriers.

Exam Tips 8 min read

ISC2 CC Exam Domains: What You Need to Know to Pass

The ISC2 CC exam consists of five domains: Security Principles, Business Continuity (BC), Disaster Recovery (DR), and Incident Response (IR), Access Controls, Network Security, and Security Operations. To pass, you must master the CIA Triad and security governance, while prioritizing high-weight domains through targeted practice and domain-specific analytics.

Deep Dive 10 min read

Mastering the CIA Triad for ISC2 CC: A Deep Dive

The CIA triad is the foundational model of information security, consisting of Confidentiality (preventing unauthorized access), Integrity (ensuring data accuracy and consistency), and Availability (guaranteeing reliable access to resources). Balancing these three pillars allows security professionals to manage risk effectively and protect organizational assets against diverse cyber threats.