{"id":42734,"date":"2021-09-22T10:00:51","date_gmt":"2021-09-22T14:00:51","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=42734"},"modified":"2023-01-06T17:40:25","modified_gmt":"2023-01-06T22:40:25","slug":"sso-business-case","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/sso-business-case","title":{"rendered":"How to Choose a Single Sign-On (SSO) Solution"},"content":{"rendered":"\n<p>Choosing the right web application single sign-on (SSO) solution for your organization can be tricky. You need to understand what options you have available, and then decide which <a href=\"https:\/\/jumpcloud.com\/blog\/single-sign-on-actually-works\">type of SSO<\/a> solution will be most beneficial for your organization long-term.&nbsp;<\/p>\n\n\n\n<p>Each solution has its pros and cons, and the right choice varies based on your organization\u2019s specific needs. Current SSO solutions are surprisingly multi-faceted \u2014 while it may seem like a simple purchasing decision, the choices can become blurred. This is because while most vendors offer SSO for the core group of applications you\u2019re going to work with, some holistic <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-single-sign-on-sso\">single sign-on<\/a> solutions include a host of other features to consider.<\/p>\n\n\n\n<p>The single sign-on solutions that exist today are either layered on top of or integrated with an organization\u2019s core directory or identity provider (IdP). These options come in the form of integrated, holistic <a href=\"https:\/\/jumpcloud.com\/platform\/single-sign-on\">cloud SSO<\/a> and directory platforms, <a href=\"https:\/\/jumpcloud.com\/blog\/web-application-single-sign-on\">web application SSO<\/a> point solutions, and <a href=\"https:\/\/jumpcloud.com\/blog\/open-source-single-sign-sso\">open-source SSO<\/a> point solutions.<\/p>\n\n\n\n<p>When vetting an SSO solution, consider asking yourself these questions to make the decision easier:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Can this scale with my organization?&nbsp;<\/li>\n\n\n\n<li>Do I already know that this solution will need to be replaced in the future?&nbsp;<\/li>\n\n\n\n<li>How well does this solution fit in with our current IT environment?\n<ul>\n<li>What about where we want our IT environment to be in 5 years?<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>What kinds of IT resources do I want to use SSO for? (Apps, devices, networks, etc.)<\/li>\n\n\n\n<li>What other capabilities am I looking for in my IT environment that could be solved by implementing a holistic SSO\/directory solution? (MDM, MFA, PAM, IGA, etc.)<\/li>\n<\/ul>\n\n\n\n<p>Like anything else in the tech ecosystem, at first there were only a couple of limited single sign-on options out there \u2014 web app <a href=\"https:\/\/jumpcloud.com\/blog\/sso-vs-ad\">SSO and Active Directory<\/a> Federation Services (AD FS). With fewer choices on the market and the dominance of Windows-based IT environments, picking a solution was fairly simple 10 to 15 years ago. Whereas now, with the rise in popularity of Mac and Linux devices as well as web applications and cloud infrastructure, making a decision is far more complex.&nbsp;<\/p>\n\n\n\n<p>Those original solutions still exist, but web app SSO solutions have migrated to being delivered from the cloud, and comprehensive IdP and SSO solutions exist such as the <a href=\"https:\/\/jumpcloud.com\/platform\">JumpCloud Directory Platform<\/a> that function as a core directory, has built-in <a href=\"https:\/\/jumpcloud.com\/blog\/sso-pros-cons\">SSO capabilities<\/a>, and includes a variety of other useful features (i.e. MFA, MDM, IGA, PAM, etc.).<\/p>\n\n\n\n<p>Where SSO solutions once connected employees solely to web applications, platform solutions like this now connect employees to virtually all the IT resources they need, including devices, web apps, legacy apps, file servers, systems, and networks. Regardless of the single sign-on solution an organization uses, though, SSO improves organizational flexibility, productivity, and security.&nbsp;<\/p>\n\n\n\n<p>In this article, we will discuss the evolution of SSO, the modern options available, rules to follow when choosing an SSO provider, and factors to consider when choosing an SSO solution.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2018\/05\/evolution-of-directory-service-simple.jpg\" alt=\"\" class=\"wp-image-14676\" width=\"410\" height=\"100\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/evolution-of-directory-service-simple.jpg 667w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/05\/evolution-of-directory-service-simple-300x73.jpg 300w\" sizes=\"(max-width: 410px) 100vw, 410px\" \/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">Evolution of SSO<\/h2>\n\n\n\n<p>What we think of as the first generation of <a href=\"https:\/\/jumpcloud.com\/blog\/identity-as-a-service-idaas\">IDaaS<\/a> (Identity-as-a-Service) platforms emerged in the late 2000s as cloud-based web application single sign-on solutions. These followed the original solutions which were enterprise-class on-prem web application solutions that integrated with Active Directory. In short, these original web app SSO solutions were created to allow IT admins in Windows-based IT environments to federate AD identities to some web apps that were not Windows-based. The goal was to avoid recreating identities in each application while maintaining the core, authoritative directory \u2014 creating less work for IT admins, providing easier access to users, and improving security.<\/p>\n\n\n\n<p>Of course, web applications comprise only one portion of the tools used in an organization each day. Now some modern SSO solutions extend beyond web applications to include other critical resources. Users also need to securely and quickly access files, legacy apps, WiFi networks and VPNs, and a variety of systems (Windows, Mac, or Linux). And, unbeknownst to end-users, they use a variety of protocols and mechanisms, including LDAP, SAML, and RADIUS, to do so. Therefore, the SSO solution you choose needs to support the protocols that your organization uses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Single Sign-On Options<\/h2>\n\n\n\n<ol>\n<li>A comprehensive cloud SSO\/core directory platform with a variety of other features built-in<\/li>\n\n\n\n<li>A web application SSO point solution used as an add-on to an existing directory<\/li>\n\n\n\n<li>An open-source web app SSO solution<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2015\/05\/IDaaSchecklist.png\" alt=\"Core Competencies\" class=\"wp-image-6995\" width=\"132\" height=\"132\"\/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">Guidelines to Follow When Choosing an SSO Provider<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Know What You Need Going in<\/h3>\n\n\n\n<p>With all of the tools available on the market, it\u2019s essential that you understand your SSO options and decide what other capabilities you need in your IT environment that you may be able to leverage out of a single solution. Then prioritize those capabilities based on necessity, the organization\u2019s future roadmap, and the makeup of your IT environment.&nbsp;<\/p>\n\n\n\n<p>Working through it in this way can help you decide if you want a bare bones SSO solution or one with all of the bells and whistles. Focus on exactly what you need (and what can wait) so you don\u2019t get saddled with features you won\u2019t use or overcharged for those you need most.&nbsp;&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Beware of Hidden Costs, and Seek out Free Trials<\/h3>\n\n\n\n<p>Every cloud service has a different way of charging their customers. Most charge on a per-user basis, but others may also include charges by API calls, number of application connectors, or by device. Similarly, you\u2019ll want to check and see whether specific features you need are built-in or considered \u00e0 la carte as add-ons. Some SSO solutions can seem very affordable at first but quickly snowball to the point where you\u2019re paying a lot more to get every feature you want.<\/p>\n\n\n\n<p>In some solutions, different features (like JIT and SCIM provisioning &#8211; often referred to as user lifecycle management) add to the cost, while others take a more <a href=\"https:\/\/jumpcloud.com\/pricing\">holistic approach<\/a>. This is where knowing what you need ahead of time comes in handy \u2014 search for a solution that includes the features that you laid out as priority items. If you decide you want to maintain AD across your organization with an add-on SSO solution, you\u2019ll need to factor in the costs of hardware and client access licenses in addition to the cost of the SSO solution.&nbsp;<\/p>\n\n\n\n<p>A good strategy for finding the right solution is to check out <a href=\"https:\/\/www.g2.com\/categories\/single-sign-on-sso?tab=highest_rated\" target=\"_blank\" rel=\"noreferrer noopener\">review sites<\/a> that provide helpful comparisons between <a href=\"https:\/\/jumpcloud.com\/blog\/comparing-single-sign-on-sso-providers\">SSO providers<\/a> based not only on price but also on features such as ease of use and more.<\/p>\n\n\n\n<p>Look for SSO solutions that offer <a href=\"https:\/\/console.jumpcloud.com\/signup\">free trials<\/a>, which are beneficial for testing and assessing whether the solution is the right fit. This also helps with executive buy-in when you can show them exactly how the solution works and prove that it\u2019s worth investing in.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Think About Your Existing Infrastructure<\/h3>\n\n\n\n<p>Will you need to build anything out? It\u2019s important to know just what you have to work with \u2014 and ask exactly what more you may need \u2014 before committing to a purchase. For example, if you want your SSO solution to apply to your on-prem applications as well, you\u2019ll need to make sure it can work with LDAP. And as always, you should check to see if they charge extra for that service.<\/p>\n\n\n\n<p>On top of that, do you have an existing identity and access management (IAM) solution in place already? If you do, consider what type of SSO solution will integrate best with it. If not, looking into a comprehensive solution that has built-in <a href=\"https:\/\/jumpcloud.com\/blog\/sso-isnt-identity-management\">IAM and SSO<\/a> capabilities could save you a lot of time later on down the line.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Consider Your Security Needs<\/h3>\n\n\n\n<p>When considering the right solution for your needs, you also want to think: What security risks am I trying to solve, and what level of security do I need?<\/p>\n\n\n\n<p>Answering these questions can help guide your research when looking at potential providers and solutions before making your final decision. If you&#8217;re using only web applications, then a web app SSO solution will work just fine. However, if you have other systems in place in addition to web apps, you&#8217;ll want to consider a core directory\/SSO platform that can federate identities to virtually all of your IT resources, not just web apps.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/06\/One-Dashboard.svg\" alt=\"illustration of sso dashboard\" class=\"wp-image-51797\" width=\"400\" height=\"318\"\/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">Factors to Consider When Selecting an SSO Solution&nbsp;<\/h2>\n\n\n\n<p>When dissecting potential SSO solutions, start by looking for these features based on the needs you established:<\/p>\n\n\n\n<ul>\n<li>Authentication via SAML<\/li>\n\n\n\n<li>Pre-built and custom connections to SAML apps<\/li>\n\n\n\n<li>Authentication via LDAP<\/li>\n\n\n\n<li>Group-based control<\/li>\n\n\n\n<li>Multi-factor authentication<\/li>\n\n\n\n<li>JIT and SCIM provisioning<\/li>\n\n\n\n<li>Conditional access policies<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Authentication via SAML<\/h3>\n\n\n\n<p>At a fundamental level, any viable SSO solution needs to support SAML authentication to applications because of its ubiquity in web apps.<\/p>\n\n\n\n<p>SAML, or <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\/\">Security Assertion Markup Language<\/a>, allows for authentication to web applications without the use of passwords. With SAML, service providers (i.e. Salesforce, GitHub, Slack, etc.) communicate with identity providers (i.e. core directory\/SSO providers) securely backed by certificate trusts.<\/p>\n\n\n\n<p>This method of authentication is more secure than entering a username and password for each application because end-users don\u2019t enter their credentials across an array of third-party websites \u2014 thereby centralizing and simplifying their login process. Admins can also add and remove application access more easily, enhancing their workflow, too.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Pre-Built and Custom Connections to SAML Apps<\/h3>\n\n\n\n<p>Another key feature of an ideal SSO solution is the inclusion of pre-built and custom connections to SAML applications.<\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/integrations\">Pre-built connections<\/a> reduce the setup work for admins drastically and should include popular apps like Google Workspace, Microsoft 365, Zoom, and much more. These connectors reduce the number of attributes admins have to fill out manually to establish a link, and they make it easier to populate user attributes in each application.<\/p>\n\n\n\n<p>Custom connections require more setup work to connect applications to the core directory. However, they enable flexibility in connecting to most, if not all, SAML-based applications on the market or those that are homegrown. With them, admins ensure efficient and secure connections for their end-users regardless of their application suite.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Authentication via LDAP<\/h3>\n\n\n\n<p>LDAP, or <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\">Lightweight Directory Access Protocol<\/a>, allows for authentication to legacy, on-prem applications, as well as more technical applications, including <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/configuring-openvpn-to-use-jumpclouds-ldap-as-a-service1\">OpenVPN<\/a> and <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/configuring-jenkins-to-use-jumpclouds-ldap-as-a-service1\">Jenkins<\/a>.<\/p>\n\n\n\n<p>An SSO solution that authenticates via both SAML and LDAP covers a wider range of applications and provides a more comprehensive experience for admins and end-users. Solutions that are SAML-only exclude legacy and technical applications to the detriment of both parties.&nbsp;<\/p>\n\n\n\n<p>Plus, if the solution offers <a href=\"https:\/\/jumpcloud.com\/platform\/ldap\">Cloud LDAP<\/a>, admins avoid the work and maintenance of spinning up and maintaining on-prem LDAP servers, which is a huge plus.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Group-Based Control<\/h3>\n\n\n\n<p>A worthwhile SSO solution should feature group-based access control by which IT admins can restrict or administer access to both SAML and LDAP applications en masse.&nbsp;<\/p>\n\n\n\n<p>For example, a sales department needs access to a completely different set of applications than the engineering department; however, they may also need access to some of the same resources. As such, IT might want to create an \u2018All Employees\u2019 group where access to Slack and Google Workspace are provisioned to everyone, as well as <a href=\"https:\/\/jumpcloud.com\/blog\/groups-work-smarter\">a group for each department<\/a> with specific resource access provisioned.<\/p>\n\n\n\n<p>In some SSO solutions, admins can <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/getting-started-applications-saml-sso2\">upload XML metadata<\/a> files via PowerShell to populate connector attributes for applications \u2014 another way to streamline the process of establishing connections with apps. Examples of attributes that could be passed along include user roles and departments.<\/p>\n\n\n\n<p>Access controls also improve security because they ensure access to each application isn\u2019t universal across an organization. They prevent cross-contamination, so to speak, which also limits the possibility of users linking or modifying information in a damaging way. Using the idea of <a href=\"https:\/\/jumpcloud.com\/blog\/principle-least-privilege-user-management\">least privilege access<\/a> via group control is a great way to protect your resources.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Multi-Factor Authentication<\/h3>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/platform\/multi-factor-authentication-mfa\">Multi-factor authentication<\/a> (MFA) is a must-have along with single sign-on. If you\u2019re interested in improving security along with productivity by implementing an SSO solution, it\u2019s in your organization\u2019s best interest to protect each central identity with another layer of security \u2014 MFA.<\/p>\n\n\n\n<p>Best practices for adopting an SSO solution across your IT environment include enforcing <a href=\"https:\/\/jumpcloud.com\/blog\/password-length-better-than-complexity\">password complexity<\/a> requirements and\/or <a href=\"https:\/\/jumpcloud.com\/blog\/password-rotation\">password rotation<\/a> requirements, and pushing out MFA to every device used across the organization. MFA is a tough security layer for bad actors to bypass, and MFA successfully guards against the majority of data breaches. Even if a bad actor steals credentials, MFA serves as an additional and powerful roadblock to protect company resources and data.<\/p>\n\n\n\n<p>MFA is especially essential in this case because SSO enables end-users to access virtually all their resources via a single login and portal, and therefore, that portal should be heavily guarded. And, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-step-up-authentication-and-where-does-it-come-into-play\">step-up MFA<\/a> can be used for sensitive applications where MFA can be added for just that particular authentication. More sophisticated SSO solutions will employ tactics such as <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/Getting-Started-Conditional-Access-Policies\">conditional access<\/a> to vary access levels based on a variety of criteria including the user, their location, and device posture.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">JIT and SCIM Provisioning<\/h3>\n\n\n\n<p>Just-in-Time (JIT) and System for Cross-Domain Identity Management (SCIM) provisioning are other useful features to have in an SSO solution \u2014 they allow for additional automation of IT workflows.<\/p>\n\n\n\n<p>With <a href=\"https:\/\/jumpcloud.com\/blog\/jit-provisioning-defined\">JIT provisioning<\/a>, the SSO provider automatically creates a user\u2019s account in an app the first time the user attempts to log in to that app. The SSO provider knows which user attributes the app requires and pushes them to it, rather than the user or IT admin filling out the requisite forms manually.&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/blog\/scim-provisioning-defined\">SCIM provisioning<\/a> goes further, and it automates both provisioning and deprovisioning of user accounts in applications and maintains ongoing synchronization between the core directory and the connected applications.<\/p>\n\n\n\n<p>Some SSO providers supply these types of provisioning for an extra charge, while others include them for free \u2014 this is important to keep in mind if you\u2019d like to utilize these features.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/06\/Access-to-All.svg\" alt=\"sso one user one login multiple points of access illustration\" class=\"wp-image-51800\" width=\"324\" height=\"258\"\/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">JumpCloud Directory Platform + True Single Sign-On\u2122<\/h2>\n\n\n\n<p>If you landed on a holistic, core cloud directory\/SSO platform as your solution of choice \u2014 check out the <a href=\"https:\/\/jumpcloud.com\/platform\">JumpCloud Directory Platform<\/a>. JumpCloud offers SSO, among many other capabilities like MFA, MDM, IGA, PAM, and more. We refer to our SSO solution as True Single Sign-On\u2122 \u2014 it allows users to securely authenticate to virtually any IT resource they need access to, including systems, web apps, legacy apps, networks, and more, with one set of credentials.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Try our SSO Solution Free<\/h2>\n\n\n\n<p>Test out JumpCloud\u2019s modern, simplified IAM solution with True SSO, and see if it\u2019s right for your organization! Create a <a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Free<\/a> account to access the entirety of the platform for free, up to 10 users and 10 devices. Along with that, enjoy 24&#215;7 in-app support \u2014 free for the first 10 days!<\/p>\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/Hyper-Secure-with-SSO-MFA-aspect-ratio-160-110.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n                    <\/p>\n        <p class=\"is-type-body-default is-important\">\n            JumpCloud\u2019s Single Sign-On Solution        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/get-started\" data-promo=\"JC Free - SSO\" class=\"button is-primary-green promo-small-banner-link\">Get Started<\/a>\n    <\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?<\/p>\n","protected":false},"author":143,"featured_media":49631,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2337],"tags":[],"collection":[2780],"platform":[],"funnel_stage":[3015],"coauthors":[2533],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Choose a Single Sign-On (SSO) Solution - JumpCloud<\/title>\n<meta name=\"description\" content=\"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/sso-business-case\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Choose a Single Sign-On (SSO) Solution\" \/>\n<meta property=\"og:description\" content=\"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/sso-business-case\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:author\" content=\"matt.renstrom\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-22T14:00:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-06T22:40:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1262\" \/>\n\t<meta property=\"og:image:height\" content=\"674\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Brenna Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brenna Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case\"},\"author\":{\"name\":\"Brenna Lee\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7\"},\"headline\":\"How to Choose a Single Sign-On (SSO) Solution\",\"datePublished\":\"2021-09-22T14:00:51+00:00\",\"dateModified\":\"2023-01-06T22:40:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case\"},\"wordCount\":2454,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png\",\"articleSection\":[\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case\",\"url\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case\",\"name\":\"How to Choose a Single Sign-On (SSO) Solution - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png\",\"datePublished\":\"2021-09-22T14:00:51+00:00\",\"dateModified\":\"2023-01-06T22:40:25+00:00\",\"description\":\"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/sso-business-case\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png\",\"width\":1262,\"height\":674},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/sso-business-case#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Choose a Single Sign-On (SSO) Solution\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7\",\"name\":\"Brenna Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/a512f44ee3cc1a59010e879f81d8b53c\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g\",\"caption\":\"Brenna Lee\"},\"description\":\"Brenna is a Content Writer at JumpCloud that loves learning about and immersing herself in new technologies. Outside of the [remote] office, she loves traveling and exploring the outdoors!\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"matt.renstrom\",\"stefano.tomasello@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Choose a Single Sign-On (SSO) Solution - JumpCloud","description":"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/sso-business-case","og_locale":"en_US","og_type":"article","og_title":"How to Choose a Single Sign-On (SSO) Solution","og_description":"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?","og_url":"https:\/\/jumpcloud.com\/blog\/sso-business-case","og_site_name":"JumpCloud","article_author":"matt.renstrom","article_published_time":"2021-09-22T14:00:51+00:00","article_modified_time":"2023-01-06T22:40:25+00:00","og_image":[{"width":1262,"height":674,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png","type":"image\/png"}],"author":"Brenna Lee","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Brenna Lee","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case"},"author":{"name":"Brenna Lee","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7"},"headline":"How to Choose a Single Sign-On (SSO) Solution","datePublished":"2021-09-22T14:00:51+00:00","dateModified":"2023-01-06T22:40:25+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case"},"wordCount":2454,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png","articleSection":["Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case","url":"https:\/\/jumpcloud.com\/blog\/sso-business-case","name":"How to Choose a Single Sign-On (SSO) Solution - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png","datePublished":"2021-09-22T14:00:51+00:00","dateModified":"2023-01-06T22:40:25+00:00","description":"There are many single sign-on (SSO) solutions and providers out there, so how do you choose the right SSO solution for your organization?","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/sso-business-case"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/03\/sso-applications.png","width":1262,"height":674},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/sso-business-case#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"How to Choose a Single Sign-On (SSO) Solution"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7","name":"Brenna Lee","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/a512f44ee3cc1a59010e879f81d8b53c","url":"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g","caption":"Brenna Lee"},"description":"Brenna is a Content Writer at JumpCloud that loves learning about and immersing herself in new technologies. Outside of the [remote] office, she loves traveling and exploring the outdoors!","sameAs":["https:\/\/jumpcloud.com\/blog","matt.renstrom","stefano.tomasello@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/42734"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/143"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=42734"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/42734\/revisions"}],"predecessor-version":[{"id":73623,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/42734\/revisions\/73623"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/49631"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=42734"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=42734"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=42734"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=42734"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=42734"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=42734"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=42734"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}