SSO (SAML)
On this pageWhat it is
What it is
Single sign-on, or SSO, lets staff use one company login for many tools. SAML is the common standard that connects the tool to an identity provider such as Okta, Microsoft Entra or Google Workspace. Staff click sign in, are sent to the company login page and return signed in. LastPass is one tool that supports it.
Why it matters
It reduces password fatigue and gives the company one place to switch access on and off. When an employee leaves, disabling their company account closes every connected tool at once. It also lets you enforce rules such as two-step verification in one place.
It matters once a company has a few dozen staff or must meet security requests from customers. Vendors often sell SSO only on higher plans, so it can change the cost of a tool significantly.
What to check
- Which identity providers are supported, and is the protocol SAML or OpenID Connect?
- Is SSO included in the plan you are considering, or only in an enterprise tier?
- Can you require SSO for everyone, and what happens to existing local logins?
- Does it handle automatic creation and removal of users, or only login?