Single sign-on (SSO)
is a session and user authentication service that permits a user to use one set
of login credentials (such as name and password) to access multiple
applications.
In a basic web SSO service, an agent module on the application
server retrieves the specific authentication credentials for an individual user
from a dedicated SSO policy server, while authenticating the user against a
user repository such as a lightweight directory access protocol (LDAP)
directory. The service authenticates the end user for all the applications the
user has been given rights to and eliminates further prompts when the user switches
applications during the same session.
Google, LinkedIn, Twitter and Facebook all offer popular SSO
services that allow an end user to log into a third-party application with
their social media authentication credentials. Although social single sign-on
is a convenience to users, it can present security risks because it creates a
single point of failure that can be exploited by attackers. Many security
professionals recommend that end users refrain from using social SSO
services altogether, because once an attacker gains control over a user's
SSO credentials, they will be able to access all other applications that use
the same credentials.
Comments
Post a Comment