May 1, 2024
Updated November 11, 2026
20 minute read
Unlocking Digital Access: An Introduction to Single Sign-On (SSO)
Single Sign-On, or SSO, is an authentication scheme that allows users to log in with a single set of credentials to access multiple independent software systems or applications. Imagine having one key that unlocks several different doors; SSO provides a similar convenience in the digital world. Instead of juggling numerous usernames and passwords for various websites, services, and applications, users authenticate once and gain access to all affiliated systems for which they have permission. This not only simplifies the user experience but also offers significant security and operational benefits for organizations.
9458s8|
Find a path to becoming a SSO. Learn more at:
OpenCourser.com/topic/9458s8/ss
Reading list
We've selected 17 books
that we think will supplement your
learning. Use these to
develop background knowledge, enrich your coursework, and gain a
deeper understanding of the topics covered in
SSO.
Demystifies modern Single Sign-On protocols by comparing SAML 2.0 assertions, OAuth 2.0 authorization flows, and OpenID Connect ID tokens side by side. Walks developers and identity architects through session management, federated logout, and multi-factor authentication.
Co-authored by the editor of the OpenID Connect and OAuth token introspection specifications, guiding engineers through building authorization servers, clients, and protected resources from scratch. Remains the definitive technical reference on token lifecycles and OIDC federation.
Created by the Keycloak project leads, this hands-on handbook shows how to deploy open-source Single Sign-On, configure identity brokering across enterprise SAML and OIDC providers, and secure single-page and mobile applications.
Tackles modern OAuth 2.0 and OpenID Connect architectures for cloud-native APIs and Kubernetes workloads. Curity identity specialists explain token-sharing models, phantom tokens, sender-constrained access, and Zero Trust gateway integration for production SSO.
Explores enterprise federated identity, SAML 2.0 Web SSO profiles, OpenID Connect session management, PKCE, and mutual TLS token binding in deep technical detail. Equips security architects to harden cross-domain SSO deployments against token replay and phishing.
Demonstrates how edge API gateways validate Single Sign-On JSON Web Tokens (JWTs) and propagate user identity context securely across downstream microservices using token exchange. Connects user-facing SSO login flows to backend service-to-service authorization.
Maps out enterprise Single Sign-On configuration in Microsoft Entra ID, covering SAML and OIDC application federation, seamless authentication, conditional access policies, and SCIM lifecycle provisioning. Essential for cloud administrators managing hybrid directory estates.
Dissects cookie-based session storage, stateless bearer tokens, macaroon caveats, and OAuth2/OIDC SSO flows with rigorous security analysis. Teaches application engineers how to avoid CSRF, XSS token theft, and cryptographic signature bypass vulnerabilities.
Explains the symmetric-key Key Distribution Center (KDC) and Ticket Granting Service architecture that powers Windows Active Directory and Unix enterprise Single Sign-On. Indispensable for understanding SPNEGO browser negotiation and hybrid on-premises SSO.
Guides JVM engineers through building OAuth 2.0 authorization servers, OpenID Connect clients, and JWT-protected resource servers in Spring Boot 3. Bridges authentication protocol specifications with real SecurityFilterChain configurations for enterprise Java SSO.
Establishes the foundational architectural taxonomy of directory services, namespace governance, authentication assurance levels, and federated trust circles. Provides timeless conceptual clarity for designing enterprise identity and Single Sign-On programs.
Surveys contemporary Single Sign-On deployment patterns, identity provider integration checklists, and central session governance across cloud and enterprise applications. Offers a concise operational overview for IT generalists adopting federated authentication.
Analyzes how attackers target Single Sign-On identity providers through credential stuffing, Golden SAML forging, pass-the-hash, and MFA fatigue attacks. Guides defenders on combining SSO federation with privileged access management and continuous risk telemetry.
Positions federated Single Sign-On and strong phishing-resistant authentication (FIDO2/WebAuthn) at the center of modern Zero Trust policy engines. Shows how identity providers evaluate user and device context on every access request.
Translates the dense OAuth 2.0 RFC specifications into straightforward developer workflows for authorization codes, PKCE, refresh tokens, and client registration. Authored by an identity standards editor to help web and mobile teams avoid common SSO integration pitfalls.
Demonstrates how cloud engineering teams protect CI/CD pipelines, SSH bastions, and internal admin dashboards behind centralized Single Sign-On and short-lived cryptographic certificates. Connects identity federation directly to modern DevSecOps operations.
Unpacks the RSA, elliptic-curve digital signatures, SHA-2 hashes, and TLS handshakes that guarantee the authenticity of SAML assertions, OIDC JWTs, and WebAuthn passkeys. Gives identity engineers a rock-solid understanding of the cryptography underlying SSO.
For more information about how these books relate to this course, visit:
OpenCourser.com/topic/9458s8/ss
Save
