𝗛𝗼𝘄 𝗱𝗼𝗲𝘀 𝗦𝗶𝗻𝗴𝗹𝗲 𝗦𝗶𝗴𝗻-𝗢𝗻 (𝗦𝗦𝗢) 𝘄𝗼𝗿𝗸?

Single sign-on (SSO) is an authentication process that allows a user to access multiple applications with a single login. This is accomplished using a central authentication server that stores the user's credentials and verifies them for each application.

Here are 𝘁𝗵𝗲 𝘀𝘁𝗲𝗽𝘀 that happen if you want to access Trello by using your Google account:

1. Use the Trello login web page and select Google account as a login method
2. Trello redirects the user to the Google login page
3. User is served with the Google login page
4. The user enters their Google credentials
5. Trello forwards credentials to Google
6. Google sends authentication info to the SSO Authorization server
7. If credentials are valid, the Authorization server returns the auth token (SAML)
8. Google send the auth token to the Trello
9. In the last step, Trello sends the token to the Google Authorization server to validate its
10. If the token is valid, Trello will allow access to the user and store the session for future interactions

The 𝗯𝗲𝗻𝗲𝗳𝗶𝘁𝘀 of SSO are:

🔹 Improved user experience: Users do not need to remember multiple usernames and passwords.

🔹 Increased security: Users are less likely to reuse passwords across applications.

The 𝗱𝗶𝘀𝗮𝗱𝘃𝗮𝗻𝘁𝗮𝗴𝗲𝘀 are:

🔸 Single point of failure: One of the most notable disadvantages is that SSO creates a single point of failure. The attacker could access all connected applications and services if the SSO system is compromised.

🔸Security risks: If credentials are compromised, the security of all connected applications could be at risk.

Some 𝗰𝗼𝗺𝗺𝗼𝗻 𝘁𝘆𝗽𝗲𝘀 𝗼𝗳 𝗦𝗦𝗢 are:

🔹 𝗦𝗔𝗠𝗟-𝗯𝗮𝘀𝗲𝗱 𝗦𝗦𝗢: This is the most common type of SSO. It uses the SAML protocol to exchange authentication information between the SSO server and applications.

🔹 𝗢𝗔𝘂𝘁𝗵 𝟮.𝟬: It provides delegated access to server resources on behalf of a resource owner. It specifies how tokens are transferred, allowing a user's identity to be authenticated by an IDP and the credentials to be used to access APIs.

🔹 𝗢𝗽𝗲𝗻𝗜𝗗 𝗖𝗼𝗻𝗻𝗲𝗰𝘁: This is a newer type of SSO based on OAuth 2.0. It is a more straightforward protocol than SAML and is easier to integrate with web applications.

Some 𝗽𝗼𝗽𝘂𝗹𝗮𝗿 𝗦𝗦𝗢 𝘀𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 are:

🔹 Azure Active Directory
🔹 Okta
🔹 Ping Identity
🔹 OneLogin
🔹 Google Cloud Identity Platform

#programming #web

To expand your knowledge and personal growth, subscribe to my free weekly newsletter with 20,000+ people: https://t.co/MMCXxQQR4F.