What it means
With single sign-on, a worker signs in once with their company account and gets into the apps the company has connected. They don't make a new username and password for each one.
For the company, the benefit is control. The IT team sets who can get in, and can turn off access in one place. Passwords stay with the company's identity system, not scattered across vendors.
SSO works best for people who have a company account. Many crew members don't have one. They may be seasonal, contract or new, and may have only a personal phone. Ask what the sign-in plan is for them, since a tool that only offers SSO leaves them out.
Why it matters
When someone leaves, one change in the company's identity system can cut off their access to every connected app. Without it, accounts stay open in tools nobody remembered to check. For crews, the other half matters too: an easy way in for people with no company email.
What it looks like on a site
- A worker taps a button, signs in with the company account, and lands in the app.
- IT sets up the connection once, and new apps are added the same way.
- When a person is offboarded, their access ends without someone going app by app.
- Crew members with no company email use another way in, like a code or a phone number.
- Admins can see who signed in and from where.
This is general information, not legal advice. Check the current rule and your own procedures. Back to the glossary