In short
Single sign-on lets a user sign in once with a central identity provider and then access many applications without signing in to each separately.
Key takeaways
- It means fewer passwords and lets access be removed in one place when someone leaves.
- A stolen sign-on credential opens many systems, so it should be paired with multi-factor authentication.
- The identity provider becomes a critical system to protect and keep available.
Where it's tested
ISC: Information Technology General Controls (ITGCs) — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A developer at a company has standing write access to the production database. Which ITGC category does this deficiency primarily relate to, and why does it matter?