What Single sign-on (SSO) means
SSO simplifies logins and lets you enforce MFA and remove access in one place when someone leaves. That reduces forgotten accounts and shared passwords. It is common in growing companies using Google Workspace or Microsoft 365.
Why it matters for your website
With SSO, staff have one strong login instead of a pile of reused passwords, which cuts a major cause of breaches. When someone leaves, you can turn off one account and remove their access to everything at once.
A hypothetical 15-person accounting firm connects its email, file storage and project tools to one company login, so a departing employee loses access to all of them in one step.
Tips
- Require multi-factor authentication on the SSO account itself.
- Connect the apps that hold the most sensitive data first.
- Make offboarding a checklist step that disables the SSO account the same day.
Common mistakes
- Leaving old local logins active alongside SSO, which keeps the back door open.
- Protecting the single login with only a password.
