What does single sign-on do?
Single sign-on links many applications to one sign in. A user proves the identity one time. The user then moves between applications without a new sign in. This saves time and cuts the number of passwords.
- A user signs in one time.
- The user reaches many applications.
- The team manages one set of accounts.
How does single sign-on work?
Single sign-on relies on an identity provider. The applications trust the identity provider. The IdP shares a secure token with each application.
- A user signs in to the identity provider.
- The identity provider creates a secure session.
- The user opens a second application.
- The application asks the identity provider to confirm the user.
- The identity provider returns a token, and access starts.
What are the benefits of single sign-on?
Single sign-on helps both users and administrators. It gives one clear path to sign in. It also gives the team one place to control access.
- Users manage fewer passwords.
- Administrators grant and revoke access in one place.
- Audit logs show each sign in across applications.
- A phishing-resistant IdP protects every connected application.
How does SenseCrypt provide single sign-on?
SenseCrypt is a passwordless identity provider (IdP) that supports single sign-on. A user signs in by face. Face matching runs on-device. SenseCrypt stores no biometric data on the server.
The face login is phishing-resistant. A user enters no password and no shared code at sign-in. The sign in binds to the device. SenseCrypt supports SSO for customer identity, workforce access, and B2B SaaS.
- It uses OIDC, OAuth 2.0 with PKCE and PAR, and SAML 2.0.
- It provisions users with SCIM 2.0.
- It supports CIBA for a backchannel sign in.
- It gives RBAC, multi-tenant isolation, and audit logs.
Frequently asked questions
What is single sign-on (SSO)?
Single sign-on (SSO) is a method that lets a user sign in one time to reach many applications. One identity provider grants access to each connected application.
What is the difference between SSO and an identity provider?
An identity provider verifies the user. Single sign-on is the feature that the IdP enables. With SSO, one sign in works across many applications.
Is single sign-on secure?
Single sign-on is as secure as its identity provider. A phishing-resistant IdP protects every connected application. SenseCrypt uses a face login that binds to the device.
Does SenseCrypt support single sign-on?
Yes. SenseCrypt gives passwordless single sign-on by face. It supports OIDC, OAuth 2.0, and SAML 2.0 for customer and workforce access.
Related