What Is Single Sign-On (SSO)?

Single sign-on, or SSO, is an authentication method that lets a person log in once with one set of credentials and then access multiple connected systems without logging in again for each. At a college, you might use SSO to reach email, the learning management system, library databases, course registration and software licenses with your student account.

How it works

You visit a service and are redirected to a central login page run by the institution, an identity provider. After you log in, often with a password and a second factor, the provider tells the service who you are, using a secure token. The service trusts that confirmation and gives you access. Common technical standards include SAML and OpenID Connect.

Benefits

• Convenience: fewer passwords and logins.
• Security: central controls such as two-factor authentication, password rules and quick removal of access when someone leaves.
• Easier administration for IT staff.
• Fewer password reset requests.
• Better logging of access.

Risks

SSO creates a single point of failure. If your main credentials are compromised, an attacker may reach many systems. Phishing emails that imitate a campus login page are common, and outages of the identity provider can lock users out of everything.

Staying safe

• Use a strong, unique password for your college account.
• Turn on two-factor authentication, with an authenticator app where possible.
• Check the web address before entering credentials, and do not click login links in suspicious emails.
• Log out on shared computers.
• Keep recovery options up to date, such as your phone and backup email.
• Review account activity if the system offers it.
• Report phishing to IT.

Other uses

SSO is also used by large websites that let you log in with an existing account, such as social media or email accounts. This is convenient, though it shares some information with the other service, so check what permissions you give.

For students

Learning how SSO works helps you troubleshoot access problems and protect your accounts. Keep your institutional email secure, since it is often used for password resets elsewhere.

Related terms

See learning management system, cookies, large language model, registrar and bursar.