Single Sign-On (SSO)

• The actual name is Azure Active Directory Seamless Single-Sign-On.
• If you want to use one credential for accessing multiple applications, then you can use Single-Sign on in Azure.
• If you are using Google, you know that once you log in to Google, then you can access Gmail, YouTube, AdSense, Google Play, Drive, etc. without giving credentials again.
• Microsoft does this with Outlook.com, Azure, Skype, Office 365, Power Platform, etc...
• This is the idea of SSO.
• Azure SSO, also provides the support of Sign-Out. In case if the user wants to log out of one credential and wants to log-In with another one.
• Azure SSO can be enabled via Azure AD Connect.
• Once SSP is enabled from the AAD instance, you can use all the applications seamlessly, hooked up to that AAD instance.
• Azure SSO is a free feature, you don’t need to pay anything for this.

SSO Example

• Let’s try to understand SSO with an example
• Please refer to the figure below

• There’s a company called ABC Corporation.
• Note here, that all the users belong to the same AAD instance.
• It has got four departmental portals
  • Finance
  • Travel
  • Security
  • Policies
• Now, whenever a user logs in to one portal for any assistance, he/she provides credentials.
• The user doesn’t need to provide credentials again while moving from one portal to another portal within the organization.
• This is how seamless the user experience you can create using Azure SSO.