Back to the blog

How to secure your data with single sign-on (SSO)

August 10 2022 | Florentin


Modified on 10/08/22 | 4 minutes read


Digitalization

Protecting user and customer data within organizations is a major issue. 80% of security breaches are linked to passwords (Verizon)... There are, however, many solutions to integrate into the security process of companies to guarantee ... Focus on one of them:

Single Sign-On ?

Single Sign-on (SSO) is an authentication technology that allows users to access a multitude of applications using a single identifier + password pair.

The best-known example remains that of social SSO offered by Facebook via the "connect with Facebook" button. The latter allows access to a multitude of online applications and websites by using your Facebook credentials. The user therefore does not waste time creating new login elements and limits the risk of forgetting their identifiers. 

How SSO works 

SSO works on a relationship of trust between an application or a website called a "service provider" and an identity provider: the SSO solution.

1. The user accesses an application or website through their browser

2. The service provider sends a token, including information such as the email address, to the identity provider through the user's browser

3. The identity provider checks whether the user is already logged in. Otherwise it is prompted to do so

4. The token is returned to the browser

5. The browser passes the token to the service provider to finalize the authentication 

6. Access is authorized. The user has access to all the services subject to this unique identification. He will not need to perform a new authentication for the duration of his session

Schéma SSO EN

3 Benefits of SSO for organizations

Organizations that deploy SSO solutions thus have an advantage in terms of security. But not only ! Here are some of the benefits of SSO for your business

 

42% of companies use posts-it for password management

Ponemon Institute

Increases security

SSO eliminates the need for rigorous password management and creation. As a result, the company is less vulnerable to phishing and hacks. Although SSO allows access to multiple features using a common identifier for several software, this provides increased security for your teams. Indeed, reusing a complex password offers better protection than using various simple passwords, which can be deciphered in less than a second. According to a Google study, 24% of respondents have already used the terms "password", "123456" or "abc123" as a password.

 

In 2020, the password "123456" was used by more than 2 million Internet users, and hacked more than 23 million times

Nordpass

 

The authentication process opens the door to further best practices in terms of security. Your IT teams can implement new security processes such as multi-factor authentication, MFA, or identity verification to meet the security requirements imposed on organizations.

SSO makes it easier for IT teams to work by increasing security 

According to a PwC study, around 30% of all support calls are related to passwords. By using a couple of unique identifiers to access the applications you use on a daily basis, you limit the risk of forgetting and therefore the calls and tickets for requesting renewal of access. 

The implementation of SSO solution facilitates the security audit and access control processes within the organization. IT teams have a real-time view of who is logging in and where they are logged in. SSO also makes it possible to configure access rights and assign roles to different users according to their responsibilities within the company.

Finally, SSO also facilitates the management of accounts and user access:

  • In the event of the departure of an employee, the use of an SSO solution allows IT teams to simply remove access to the various applications
  • In the event of loss of a professional terminal, the IT team can deactivate access to company applications and data

SSO increases employee productivity

Identification is a long and tedious process. According to a report from LastPass, employees have an average of 191 passwords. Remembering each of them imposes a strong responsibility on the teams. It is for these reasons that many employees opt for so-called "weak" passwords that are more vulnerable to hacking. 

Freed from the manual management of identifiers, employees now have fluid access to work applications. It is no longer necessary for them to remember each identifier and to reconnect each time they switch from one application to another since the SSO activates the connection for the entire duration of the session. 

Agendize and the SSO connection

Agendize adapts to the needs of companies. Users will be able to regain an SSO connection via Google and Microsoft to relieve teams of the repetitive task of authentication. We can go further and meet the needs of businesses of all sizes, which is why it is even possible to use your personalized SSO to access Agendize! 

Our wide range of APIs allows our integration partners to respond to many use cases around connection to facilitate the work of their teams but also that of their customers.

 

If you are interested in the subject, you can now contact our teams to request your demo by clicking on the button below :

Request demo

This article was written by
Florentin
Strategic Accounts Director