Hacker News new | ask | show | jobs
by throwawayboise 1568 days ago
That's centralized identity management, not single-sign-on. Single-sign-on is/was supposed to mean you sign on once. I've never seen it actually work.
4 comments

Single Sign On works beautifully in the Windows environment. Logon to one workstation, access any server's file or print shares, SQL server, IIS websites, and tons of third party software without any logon prompts but still with granular permissions.

One of those things people who say "I don't understand why anyone uses Windows" don't understand. Something so pervasive and convenient that "we" the industry have given up in moving everything to the web, along with standard menus, ubiquitous keyboard accelerators for menus and dialog boxes, scripting with the likes of COM, ActiveX, AppleScript, or embedded Python/Lua, local snapshots or volume shadow copy, tools like DNSpy and AutoHotkey and SysExporter able to introspect into running programs and their windows and system controls (and they generally weren't obfuscated javascript inside), being able to see different programs in task switchers without them all being wrapped in a web browser.

It was a different and in many ways better world 10-15 years ago.

SSO can be both Single Sign-On, or Same Sign-On.

The latter is the LDAP integrated thing - (re)using the same credentials for multiple/disparate services, controlled centrally.

The former ("true" single sign-on) is logging in once and accessing everything from there.

FWIW there are single sign-on services out there. Okta is used by my current employer, I log into the Okta portal and it has links out to all of the services it supports from there.

SSO is the source of truth, and centralized identity is the system of record. They go hand in glove. It's not a non-sequitur so much as a tangent.
for the benefit of others (I had to search it): https://www.linkedin.com/pulse/difference-between-system-rec...
Yeah, the manifestation of "LDAP Integrated" still means you have to sign into every single service, it just uses the same credentials.