Single Sign-On (SSO) in Cybersecurity - Mini Project: Build & Apply

Understanding Single Sign-On (SSO)

📖 Scenario: You work in a company that uses many different web applications for daily tasks. Logging into each app separately is slow and frustrating. Your team wants to understand how Single Sign-On (SSO) can help users log in once and access all apps securely.

🎯 Goal: Build a simple conceptual model of Single Sign-On (SSO) using a dictionary to represent users and their login status, then simulate the SSO process step-by-step.

📋 What You'll Learn

Create a dictionary of users with their login status

Add a variable to represent the SSO login token

Write code to update login status using the SSO token

Complete the model by showing all users logged in after SSO

💡 Why This Matters

🌍 Real World

SSO is widely used in companies and online services to improve user experience by reducing repeated logins.

💼 Career

Understanding SSO helps cybersecurity professionals design secure and user-friendly authentication systems.

1

Create the users dictionary

Create a dictionary called users with these exact entries: 'Alice': False, 'Bob': False, 'Charlie': False. This dictionary shows if each user is logged in (false means not logged in).

Cybersecurity

# Create the users dictionary with login status
# Your code here

Hint

Use curly braces {} to create a dictionary. Each user name is a key, and their login status is the value.

2

Add the SSO token variable

Add a variable called sso_token and set it to True. This token represents that the user has successfully logged in once using SSO.

Cybersecurity

users = {'Alice': False, 'Bob': False, 'Charlie': False}
# Add the SSO token variable
# Your code here

Hint

Just create a variable and assign it the value True.

3

Update users login status using SSO token

Use a for loop with variables user and status to iterate over users.items(). Inside the loop, update each user's login status to the value of sso_token.

Cybersecurity

users = {'Alice': False, 'Bob': False, 'Charlie': False}
sso_token = True
# Update each user's login status using the SSO token
# Your code here

Hint

Use a for loop to go through each user and set their status to True using the sso_token variable.

4

Complete the SSO model

Add a final line that creates a variable called all_logged_in and sets it to all(users.values()). This checks if all users are logged in after SSO.

Cybersecurity

users = {'Alice': False, 'Bob': False, 'Charlie': False}
sso_token = True
for user, status in users.items():
    users[user] = sso_token
# Check if all users are logged in
# Your code here

Hint

Use the all() function to check if every value in the users dictionary is True.

Practice

1. What is the main benefit of Single Sign-On (SSO) for users?

easy

A. Require two-factor authentication for every login attempt

B. Use different passwords for every application to increase security

C. Log in once to access multiple applications without re-entering passwords

D. Automatically change passwords every day for all accounts

Solution

1. Step 1: Understand SSO purpose

   SSO allows users to log in once and access many apps without repeated logins.

2. Step 2: Compare options

   Only Log in once to access multiple applications without re-entering passwords describes this main benefit; others describe different security methods.

3. Final Answer:

   Log in once to access multiple applications without re-entering passwords -> Option C

4. Quick Check:

   SSO = Single login for many apps [OK]

Hint: SSO means one login for many apps [OK]

Common Mistakes:

• Confusing SSO with password rotation
• Thinking SSO requires multiple passwords
• Mixing SSO with two-factor authentication

2. Which of the following is the correct description of how SSO works?

easy

A. Users enter credentials separately for each app

B. Users authenticate once and receive a token to access other apps

C. Users must reset passwords before accessing each app

D. Users share passwords between apps manually

Solution

1. Step 1: Identify SSO mechanism

   SSO uses a single authentication that issues a token for other apps.

2. Step 2: Eliminate incorrect options

   Options B, C, and D describe separate logins or insecure practices, not SSO.

3. Final Answer:

   Users authenticate once and receive a token to access other apps -> Option B

4. Quick Check:

   SSO = One auth, token for others [OK]

Hint: SSO uses one token after one login [OK]

Common Mistakes:

• Thinking SSO requires multiple logins
• Confusing token with password
• Assuming password sharing is part of SSO

3. Consider this scenario: A user logs in via SSO and receives a session token valid for 1 hour. What happens if the user tries to access a second app after 2 hours without logging in again?

medium

A. Access is denied because the session token expired

B. Access is granted but with limited features

C. Access is granted because the user logged in once

D. Access is denied because the user must reset password

Solution

1. Step 1: Understand session token validity

   The token is valid for 1 hour, so after 2 hours it expires.

2. Step 2: Determine access after expiration

   Without a valid token, access is denied until re-authentication.

3. Final Answer:

   Access is denied because the session token expired -> Option A

4. Quick Check:

   Expired token = no access [OK]

Hint: Expired token means no access [OK]

Common Mistakes:

• Assuming one login lasts forever
• Confusing token expiration with password reset
• Thinking limited features are given after expiry

4. A company implements SSO but users report they are asked to log in again for each app. What is the most likely cause?

medium

A. SSO tokens are not shared properly between applications

B. Users forgot their passwords

C. The company uses different passwords for each app

D. Users have disabled cookies in their browsers

Solution

1. Step 1: Identify SSO failure reason

   If users must log in repeatedly, tokens are likely not shared or recognized.

2. Step 2: Evaluate other options

   Password issues or cookie settings may affect login but token sharing is key for SSO.

3. Final Answer:

   SSO tokens are not shared properly between applications -> Option A

4. Quick Check:

   Token sharing failure = repeated logins [OK]

Hint: SSO needs token sharing between apps [OK]

Common Mistakes:

• Blaming user passwords instead of token issues
• Ignoring browser cookie settings
• Assuming different passwords cause SSO failure

5. A company wants to improve security while using SSO. Which combination best balances ease of use and security?

hard

A. Use SSO without passwords but require manual approval for each app

B. Use SSO with weak passwords but frequent password changes

C. Use separate passwords for each app and no SSO

D. Use SSO with strong passwords and multi-factor authentication

Solution

1. Step 1: Identify security best practices with SSO

   Strong passwords and multi-factor authentication protect the single login well.

2. Step 2: Compare options for balance

   Use SSO with strong passwords and multi-factor authentication combines ease (SSO) and strong security; others reduce usability or weaken security.

3. Final Answer:

   Use SSO with strong passwords and multi-factor authentication -> Option D

4. Quick Check:

   Strong auth + SSO = secure and easy [OK]

Hint: Strong auth plus SSO improves security [OK]

Common Mistakes:

• Ignoring multi-factor authentication
• Thinking weak passwords are acceptable with SSO
• Believing manual approvals replace strong auth