Single Sign-On (SSO)
Single sign-on (SSO) is an authentication mechanism that allows users to log in once with a single set of credentials and gain access to multiple connected applications without re-authenticating for each one.
Understanding Single Sign-On (SSO)
SSO reduces authentication friction and improves security simultaneously. Instead of maintaining separate passwords for dozens of work applications, users authenticate once through an identity provider (IdP) like Okta, Google Workspace, or Microsoft Entra. The IdP issues tokens that connected applications trust, allowing seamless access without repeated login prompts. For organizations, SSO centralizes access management: when an employee leaves, revoking their IdP account automatically cuts access to all connected applications. SSO is implemented through standards like SAML 2.0 and OpenID Connect.
How GAIA Uses Single Sign-On (SSO)
GAIA supports SSO through Google authentication, allowing users to sign in with their Google account without creating a separate GAIA password. Enterprise deployments can configure SAML-based SSO through identity providers like Okta or Microsoft Entra, integrating GAIA into centralized access management. SSO also streamlines OAuth integrations — since users are already authenticated with Google, connecting Gmail and Calendar requires no additional credentials.
Related Concepts
OAuth
OAuth (Open Authorization) is an open standard for delegated authorization that allows a third-party application to access a user's data in another service without requiring the user to share their password.
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is a security mechanism that requires users to provide two separate forms of verification before accessing an account: something they know (password) and something they have (a code from an authenticator app or hardware key) or something they are (biometrics).
Password Manager
A password manager is an application that securely stores, generates, and autofills passwords and other credentials, enabling users to maintain unique, complex passwords for every account without memorizing them.
API Integration
API integration is the process of connecting different software applications through their Application Programming Interfaces, enabling them to share data and functionality seamlessly.
