Home > Glossary > CompTIA Security+ Certification Exam > Single Sign-On (SSO)

📖 What is Single Sign-On (SSO)?

Single Sign-On (SSO) is an authentication scheme that allows a user to log in with a single ID and password to gain access to multiple related, yet independent, software systems. It reduces password fatigue and simplifies the user login experience.

🥋 Sensei Says:

"While SSO improves user experience, it creates a single point of failure; therefore, MFA is almost always required to secure the SSO portal."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of Single Sign-On (SSO)?

▸ Centralized Authentication: A single identity provider (IdP) validates credentials once and provides access tokens to multiple service providers (SPs) across the network.
▸ Federated Identity: Extends SSO capabilities across different organizational boundaries using standards like SAML, OIDC, or OAuth to allow secure cross-domain authentication.
▸ Authentication Tokens: Instead of passwords, SSO uses digitally signed tokens to communicate identity and authorization levels between the IdP and the application.
▸ Single Point of Failure: If the SSO provider is unavailable or an account is compromised, access to all integrated systems is simultaneously impacted.
▸ Password Fatigue Mitigation: By reducing the number of credentials a user must manage, SSO prevents the habit of using weak or recycled passwords.

🎯 How does Single Sign-On (SSO) appear on the SY0-701 Exam?

You may be asked to recommend a solution for a company where employees are struggling to manage dozens of different passwords for various SaaS applications, leading to poor security habits.

A scenario might describe a user logging into a corporate portal and then accessing a third-party cloud application without being prompted for credentials again; you must identify this as SSO.

Expect questions about the security risks associated with centralized authentication and the specific control—Multi-Factor Authentication (MFA)—required to mitigate the risk of a single compromised account.

❓ Frequently Asked Questions

What is the difference between SSO and Federation?

SSO is the general concept of one login for multiple apps. Federation is a specific implementation of SSO that allows identity sharing across different organizations or security domains using standards like SAML.

Does SSO replace the need for strong password policies?

No. While SSO reduces the number of passwords, the single password used for the SSO portal becomes a high-value target, making strong password policies and MFA even more critical.

Related Terms from CompTIA Security+ Certification Exam

Network Segmentation Multi-Factor Authentication Biometrics Privileged Access Management (PAM) Perfect Forward Secrecy (PFS) Salting

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.