Single Sign-On (SSO)
Single sign-on (SSO) is an authentication mechanism that allows users to log in once with a single set of credentials and gain access to multiple connected applications without re-authenticating for each one.
Understanding Single Sign-On (SSO)
SSO reduces authentication friction and improves security simultaneously. Instead of maintaining separate passwords for dozens of work applications, users authenticate once through an identity provider (IdP) like Okta, Google Workspace, or Microsoft Entra. The IdP issues tokens that connected applications trust, allowing seamless access without repeated login prompts. For organizations, SSO centralizes access management: when an employee leaves, revoking their IdP account automatically cuts access to all connected applications. SSO is implemented through standards like SAML 2.0 and OpenID Connect.
How GAIA Uses Single Sign-On (SSO)
Self-serve GAIA accounts sign in through WorkOS AuthKit, so you can use your Google account instead of creating a separate GAIA password; SSO and SCIM provisioning come with GAIA Enterprise. Each tool you connect, such as Gmail or Slack, then authorizes through its own OAuth consent screen, so GAIA never handles those passwords either.
Related Concepts
OAuth
OAuth (Open Authorization) is an open standard for delegated authorization that allows a third-party application to access a user's data in another service without requiring the user to share their password.
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is a security mechanism that requires users to provide two separate forms of verification before accessing an account: something they know (password) and something they have (a code from an authenticator app or hardware key) or something they are (biometrics).
Password Manager
A password manager is an application that securely stores, generates, and autofills passwords and other credentials, enabling users to maintain unique, complex passwords for every account without memorizing them.
API Integration
API integration is the process of connecting different software applications through their Application Programming Interfaces, enabling them to share data and functionality directly.
