{"id":896,"date":"2024-12-23T07:05:57","date_gmt":"2024-12-23T07:05:57","guid":{"rendered":"https:\/\/www.cybernexa.com\/blog\/?page_id=896"},"modified":"2025-03-19T10:37:19","modified_gmt":"2025-03-19T10:37:19","slug":"study-what-is-federated-sso","status":"publish","type":"page","link":"https:\/\/www.cybernexa.com\/blog\/study-what-is-federated-sso\/","title":{"rendered":"What is Federated SSO?"},"content":{"rendered":"\t\t
\r\n\t\t\t\t\t\t\t
\r\n\t\t\t\t\t\t\t
\r\n\t\t\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t

Federated Single Sign-On (SSO)<\/b> is an advanced authentication mechanism that allows users to access multiple applications or services across different organizations or domains using a single set of credentials. Unlike traditional SSO, which operates within a single organization, federated SSO extends authentication capabilities across multiple trusted entities, enabling seamless collaboration and resource sharing.<\/span><\/p>

For example, with Federated SSO, an employee from Company A can use their credentials to access a partner system in Company B without requiring separate login details.<\/span><\/p><\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t

\r\n\t\t\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t

Federated SSO Overview\n<\/h2>\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t
\r\n\t\t\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t

Federated SSO relies on a <\/span>trust relationship<\/b> between entities. This trust is established through cryptographic keys and commonly used authentication protocols like SAML, OAuth, or OpenID Connect. Federated SSO simplifies the user experience by enabling secure access across domains while reducing password-related risks.<\/span><\/p><\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t

\r\n\t\t\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t

Key Components: Identity Providers (IdPs) and Service Providers (SPs)\n<\/h2>\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t
\r\n\t\t\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t
  1. Identity Provider (IdP)<\/b>:<\/span>
    <\/span>An entity that authenticates users and provides their identity information to other systems. Examples include Azure AD, Okta, and Google Workspace.<\/span><\/li>
  2. Service Provider (SP)<\/b>:<\/span>
    <\/span>The application or service that relies on the IdP to verify user credentials. Examples include Salesforce, Slack, and Dropbox.<\/span><\/li><\/ol>

    The interaction between these components allows users to log in once and access multiple systems across domains.<\/span><\/p><\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t

    \r\n\t\t\t\t\t\t
    \r\n\t\t\t\t\t
    \r\n\t\t\t
    \r\n\t\t\t\t\t\t\t\t
    \r\n\t\t\t\t
    \r\n\t\t\t

    Comparison of Federated SSO with Standard SSO\n<\/h2>\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t
    \r\n\t\t\t\t\t\t
    \r\n\t\t\t\t\t
    \r\n\t\t\t
    \r\n\t\t\t\t\t\t\t\t
    \r\n\t\t\t\t
    \r\n\t\t\t\t\t

    \u00a0<\/p>

    Feature<\/b><\/p><\/td>

    Standard SSO<\/b><\/p><\/td>

    Federated SSO<\/b><\/p><\/td><\/tr>

    Scope<\/span><\/p><\/td>

    Within a single organization<\/span><\/p><\/td>

    Across multiple organizations<\/span><\/p><\/td><\/tr>

    Trust Relationship<\/span><\/p><\/td>

    Not required<\/span><\/p><\/td>

    Essential between entities<\/span><\/p><\/td><\/tr>

    Common Use Case<\/span><\/p><\/td>

    Internal systems (e.g., HR tools)<\/span><\/p><\/td>

    Cross-domain apps (e.g., partner portals)<\/span><\/p><\/td><\/tr><\/tbody><\/table><\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t

    \r\n\t\t\t\t\t\t
    \r\n\t\t\t\t\t
    \r\n\t\t\t
    \r\n\t\t\t\t\t\t\t\t
    \r\n\t\t\t\t
    \r\n\t\t\t

    When Should I Choose Federated SSO over SSO?\n<\/h2>\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\t\t\t\t<\/div>\r\n\t\t<\/section>\r\n\t\t\t\t
    \r\n\t\t\t\t\t\t
    \r\n\t\t\t\t\t
    \r\n\t\t\t
    \r\n\t\t\t\t\t\t\t\t
    \r\n\t\t\t\t
    \r\n\t\t\t\t\t

    Choose Federated SSO when:<\/span><\/p>