Hacker News Reader

SSO = Single sign-on

"SSO refers to a SaaS or similar vendor allowing a business client to manage user accounts via the client’s own identity provider, without having to rely on the vendor to provide strong authentication with audit logs, and with the ability to create and delete user accounts centrally, for all users, across all software in use by that client."

View on HN

Normally you would expect any SSO capable application to keep its own auth logs.

It’s certainly not a SaaS-centric thing. SSO has been around once before we used it widely with HTTP.

I would also argue that the last part conflates SSO and SCIM. Usually these are kept as distinct features, even if compatible.

Reply on news.ycombinator.com