Definition
Single sign-on (SSO) is an authentication process in which one account and its authenticators are used to access multiple applications seamlessly, generally implemented with a federation protocol. In HR software, SSO lets employees reach their HR, payroll, and benefits tools after signing in once through the company identity provider.
Also known as: SSO, single sign on
How it works
With SSO, an organization designates a central identity provider that authenticates each user. Connected applications, often called service providers, trust that provider rather than storing separate credentials. NIST describes the approach as using one account and its authenticators to reach multiple applications, generally through a federation protocol.
When an employee opens an HR application, it redirects the sign-in request to the identity provider. If the employee already has an active session, access is granted without another login. Otherwise the employee authenticates once, and the provider passes a signed assertion back to the application.
For HR teams, SSO centralizes access control. Disabling the account at the identity provider removes access across connected tools, though user records may still need cleanup through provisioning standards such as SCIM.
Example
A 400-employee company connects its HRIS, benefits portal, and learning platform to its identity provider. Employees sign in once each morning, and IT disables one account at termination to cut off access to all three.
How it differs from similar terms
Single Sign-On vs SCIM. SSO handles authentication, meaning how a user proves identity at sign-in. SCIM handles provisioning, meaning how user accounts are created, updated, and removed across applications.
Software that handles it
- HRIS Software
A shortlist of HRIS platforms ranked from verified product data, so you can compare employee-record depth, integrations and real pricing instead of marketing pages.
- HR Software
A shortlist of HR software ranked from verified product data, not vendor claims, so you can match a platform to your headcount, workforce type and budget.
Related terms and guides
Frequently asked questions
What does single sign-on mean?
Single sign-on is an authentication process where one account and its authenticators grant access to multiple applications without separate logins. NIST notes it is generally implemented with a federation protocol, so applications rely on a central identity provider to confirm who the user is.
Why does SSO matter for HR software?
HR systems hold sensitive employee data, so centralized authentication helps IT enforce consistent sign-in policies and remove access in one place. Employees also manage fewer passwords. Buyers typically ask whether an HR vendor supports SSO with their identity provider and whether it is included in the plan.
Does SSO create or delete user accounts?
No. SSO authenticates users who already have accounts. Creating, updating, and deactivating those accounts across applications is a provisioning task, commonly handled with a standard such as SCIM alongside SSO. Disabling a user at the identity provider blocks sign-in, but leftover accounts in each application may still need cleanup.