What is SSO?
Last updated
Last updated
Single Sign-On (SSO) is an authentication method that allows users to log in once and access multiple applications without having to log in again.
Think about your experience with Google services:
You log into Gmail with your Google account
You can then access YouTube, Google Drive, Google Photos without entering your password again
All these services recognize that you're already authenticated
This is SSO in action!
An Identity Provider (IDP) is a system that:
Manages user identities and credentials
Provides authentication services
Issues security tokens to applications
Maintains user profile information
Oten IDP is our identity provider system that enables SSO for your applications.
SSO primarily handles authentication - proving who you are.
SSO enables federated identity, where:
❌ Multiple passwords to remember ❌ Multiple login processes ❌ Security risks from password reuse
✅ One password to remember ✅ Single login process ✅ Enhanced security
Oten IDP uses industry-standard protocols:
Don't worry about the technical details yet - we'll cover these in the developer sections!
Next: Learn about Why Use SSO? to understand the benefits
User tries to access any application
Application redirects to Oten IDP
User logs in once at the IDP
IDP confirms identity to all applications
User can access all applications without logging in again
Authentication: "Who are you?" (Proving identity)
Authorization: "What can you do?" (Permissions and access rights)
One identity can be used across multiple systems
Trust relationships exist between applications and the IDP
User data is shared securely between trusted systems
OAuth 2.0: Authorization framework
OpenID Connect (OIDC): Identity layer on top of OAuth 2.0
SAML: Security Assertion Markup Language (for enterprise - coming soon)