As we know, Single-Sign On of SSO is a centralized session and user authentication service that allows a user to use login credentials across multiple applications. There are a few benefits to the the usage of SSO, such as less time spent on manually logging in to an application, reduces human errors, and can free up time that can be spent on other important matters (DougDrinkwater, 2018). There are risks that come with using a SSO service which can include long set up times, SSO-linked sites could possibly give data to third-party sites, and in the event of a hacker breaching your account then all connected applications can be exploited (RenovoData, 2019).
There are some measures that can be taken to increase a SSO service’s security. One method would be to utilize a “zero trust” policy, which has the system not automatically trust anything and must verify anything trying to access the system (Pratt, 2018). Other methods could include multi-factor authentication when first signing in, automatic log outs when not in use, the usage of strong, complex passwords that are frequently changed, and other similar hardening techniques.
DougDrinkwater. (2018, July 17). What is single sign-on? How SSO improves security and the user experience. Retrieved September 30, 2020, from https://www.csoonline.com/article/2115776/what-is-single-sign-on-how-sso-improves-security-and-the-user-experience.html
Pratt, M. (2018, January 16). What is Zero Trust? A model for more effective security. Retrieved September 30, 2020, from https://www.csoonline.com/article/3247848/what-is-zero-trust-a-model-for-more-effective-security.html
RenovoData. (2019, January 17). The Pros and Cons to Single Sign-On (SSO). Retrieved September 30, 2020, from https://www.renovodata.com/blog/2019/01/17/single-sign-on