SSO

Single Sign-On (SSO) lets staff authenticate once with a central identity provider (Microsoft Entra, Google, Okta) and then reach every connected app without separate passwords. It shrinks the password sprawl attackers love, centralises MFA enforcement, and — crucially for offboarding — means disabling one account cuts access everywhere at once.