ISC2 Certified in Cybersecurity (CC)Access Controls ConceptsMedium
A large enterprise uses a centralized system that allows users to log in once and gain access to multiple independent software systems without re-authenticating. This streamlines user experience and reduces password fatigue. What is this technology called?
- ASingle Sign-On (SSO)
- BFederated Identity Management (FIM)
- CIdentity and Access Management (IAM)
- DMulti-Factor Authentication (MFA)
Show answer & explanationAnswer & explanation
Correct answer: A. Single Sign-On (SSO)
Single Sign-On (SSO) is an authentication scheme that allows a user to log in with a single ID and password to gain access to multiple connected systems or applications, without needing to re-authenticate for each one.
Why the other options are wrong
- B. FIM extends SSO across different, unrelated organizations, which is not explicitly stated here.
- C. IAM is a broad framework for managing identities and access, SSO is a component of it.
- D. MFA requires multiple authentication factors, not a single login for multiple systems.
Single Sign-On (SSO)
An authentication process that allows a user to access multiple applications with one set of login credentials.
- Improves user experience and productivity.
- Reduces password-related help desk calls.
- Can be implemented using protocols like SAML or OAuth.
Memory trick: Manage identities, sign on once.