SSO can be achieved in various ways, but the most common approach is federation; the user logs into an identity provider (IDP) service. The IDP hands off a token, assertion, or ticket to an application in order to gain access without asking the user to re-authenticate. Kerberos, Security Assertion Markup Language (SAML), OAuth and OpenID Connect (OIDC) are some of the common federation technologies. Learn More.