Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What is the difference between Federated Login and Single Sign On authentication methods?

share|improve this question

3 Answers 3

up vote 15 down vote accepted

Single Sign-on (SSO) allows users to access multiple services with a single login.

The term is actually a little ambiguous. Sometimes it's used to mean that (1) the user only has to provide credentials a single time per session, and then gains access to multiple services without having to sign in again during that session. But sometimes it's used to mean (2) merely that the same credentials are used for multiple services; the user might have to login multiple times, but it's always the same credentials. So beware, all SSO's are not the same in that regard. Many people (me included) only consider the first case to be "true" SSO.

Federated Identity (FID) refers to where the user stores their credentials. Alternatively, FID can be viewed as a way to connect Identity Management systems together. In FID, a user's credentials are always stored with the "home" organization (the "identity provider"). When the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials. So the user never provides credentials directly to anybody but the identity provider.

FID and SSO are different, but are very often used together. Most FID systems provide some kind of SSO. And many SSO systems are implemented under-the-hood as FID. But they don't have to be done that way; FID and SSO can be completely separate too.

share|improve this answer
    
Thank you. This makes much more sense to me now (I think), but only after your interpretation, as the FID wikipedia page was not resolving the difference for me. SO, BrowserID is SSO and accessing stackoverflow with a Google account is FID? –  c card Apr 16 '12 at 21:46

FID researching in multi parties trusting in same Identity managment system, for example you can log in to Flicar by your Yahoo account; here Flicar depends on Yahoo and trust in it to authenetcate you.In FID it must be there a third party(identity provider) beside the user and the service provider.

SSO is researching in how to login to multi services by single sign in.for example if you login to your hotmail account you will be able to log in to SkyDrive service without need to log in again.

I dont have an example but I think you can either login by SSO to many services using FID or you can log in by SSO without using FID.

share|improve this answer

SSO allows a single authentication credential--user ID and password, smart card, one-time password token or a biometric device--to access multiple or different systems within a single organization. A federated identity management system provides single access to multiple systems across different enterprises.

source

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.