A Five Minute Overview of AWS Single Sign-On

Eden Hare
7 min readOct 28, 2019

Single Sign-On (SSO) is a concept where a user authenticates and can access multiple applications without having to log in to those other applications. This is pretty common within enterprises so users don’t have to log in to all of the applications they use every day.

According to Techopedia.com, the advantages of using SSO are:

  • Eliminating credential reauthentication and help desk requests; thus, improving productivity.
  • Streamlining local and remote applications and desktop workflow.
  • Minimizing phishing.
  • Improving compliance through a centralized database.
  • Providing detailed user access reporting.

By maintaining a centralized user database, it is also easier to remove access when a user leaves the company by invalidating their SSO credentials. SSO authentication can be extended by adding an authorization database, where authorizations for specific application access and privileges are stored. This authorization database can be used for ongoing access management and control what privileges the user is permitted within an application.

Many enterprises use applications like Computer Associates’ SiteMinder (now known as Layer7 SiteMinder) or similar products to provide SSO support for their on-premise applications.

What is AWS SSO

--

--

Eden Hare
Eden Hare

Written by Eden Hare

Eden is the co-author of seven books and author of more than 100 articles and book chapters in technical, management, and information security publications.