Many vendors charge 2x, 3x, or 4x the base product pricing for access to SSO, which disincentivizes its use and encourages poor security practices. attached to a price tier, but with a reasonably small gap between the non-SSO tier and SSO tiers.an optional paid extra for a reasonable delta, or.If companies claim to “take your security seriously”, then SSO should be available as a feature that is either: SSO is often only available as part of “Enterprise” pricing, which assumes either a huge number of users (minimum seat count) or is force-bundled with other “Enterprise” features which may have no value to the company using the software. SaaS vendors appear not to have received this message, however. In short: SSO is a core security requirement for any company with more than five employees. In the event that an employee leaves the company, it allows the IT team to immediately disable their access to all applications, rather than logging into 100 different user management portals. In this context, SSO refers to a SaaS or similar vendor allowing a business client to manage user accounts via the client’s own identity provider, without having to rely on the vendor to provide strong authentication with audit logs, and with the ability to create and delete user accounts centrally, for all users, across all software in use by that client.įor organizations with more than a handful of employees, this feature is critical for IT and Security teams to be able to effectively manage user accounts across dozens or hundreds of vendors, many of which don’t support features like TOTP 2FA or U2F.

Single sign-on (SSO) is a mechanism for outsourcing the authentication for your website (or other product) to a third party identity provider, such as Google, Azure AD, Okta, PingFederate, etc. The SSO Wall of Shame A list of vendors that treat single sign-on as a luxury feature, not a core security requirement. The SSO Wall of Shame | A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.

Reason core security activation key