Single sign-on
Also called: SSO
SSO: one company login gives access to many connected applications, so staff do not keep a separate password for each. Accounts are managed in one place and can be disabled in one step when someone leaves. The flip side is that a stolen SSO account opens every connected app, so protect it with MFA, preferably a phishing-resistant method.
Further reading: csrc.nist.gov
Advisories that mention this term
Saxony emergency pager alerts intercepted and posted online for years, exposing patient names, addresses and conditions
heise online, citing Der Spiegel, reports that emergency alerts sent to the mobile pagers of fire, ambulance and civil-protection services in Saxony, Germany, have apparently been intercepted and posted on a social network for years, with hundreds arriving daily, mainly affecting the Leipzig area and the Zwickau, Vogtland and Erzgebirge districts .
SMBC Nikko employee stock ownership plan system breached; addresses and bank transfer details of up to 56,000 members leaked
SMBC Nikko Securities announced on 11 November that the stock-ownership-association management system it uses for outsourced plan administration was accessed by a third party, and personal data of some members was confirmed leaked .
SAP November Patch Day fixes four CVSS 10.0 flaws letting unauthenticated attackers compromise NetWeaver and Web Dispatcher
SAP's November 10 Security Patch Day bulletin rates four flaws in ICM, Web Dispatcher, SAP Gateway and the SAML2 service provider (CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017) at CVSS 10.
Attacker abuses Qubole platform AWS account credentials to assume customers' trusted roles and steal secrets and S3 data
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
Hackers access Doutor Coffee online shop admin panel, exposing about 25,000 member records
Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data .