When users log in with the Single sign-on (SSO) token created by the microservice, they are redirected to the Identity and Access Management (IAM) system for authentication. The SSO token is then encrypted and can then be used to log in with the user on subsequent attempts. An SSO token specifies which resources a user is allowed to access. Microservices can also be authorized by IAM systems.