Single Sign-On (SSO)
Single sign-on (SSO) is an authentication mechanism that allows users to log in once with a single set of credentials and gain access to multiple connected applications without re-authenticating for each one.
理解する Single Sign-On (SSO)
SSO reduces authentication friction and improves security simultaneously. Instead of maintaining separate passwords for dozens of work applications, users authenticate once through an identity provider (IdP) like Okta, Google Workspace, or Microsoft Entra. The IdP issues tokens that connected applications trust, allowing seamless access without repeated login prompts. For organizations, SSO centralizes access management: when an employee leaves, revoking their IdP account automatically cuts access to all connected applications. SSO is implemented through standards like SAML 2.0 and OpenID Connect.
GAIAの活用方法 Single Sign-On (SSO)
セルフサービスのGAIAアカウントはWorkOS AuthKitでサインインするため、GAIA専用のパスワードを作らずにGoogleアカウントを使えます。SSOとSCIMプロビジョニングはGAIA Enterpriseに含まれます。GmailやSlackなど接続する各ツールは、それぞれのOAuth同意画面で認可されるので、GAIAがそれらのパスワードを扱うこともありません。
関連概念
OAuth
OAuth (Open Authorization) is an open standard for delegated authorization that allows a third-party application to access a user's data in another service without requiring the user to share their password.
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is a security mechanism that requires users to provide two separate forms of verification before accessing an account: something they know (password) and something they have (a code from an authenticator app or hardware key) or something they are (biometrics).
Password Manager
A password manager is an application that securely stores, generates, and autofills passwords and other credentials, enabling users to maintain unique, complex passwords for every account without memorizing them.
API統合
API統合とは、アプリケーションプログラミングインターフェースを介してさまざまなソフトウェアアプリケーションを接続し、データと機能をシームレスに共有できるようにするプロセスです。
