Single sign-on is an identity management solution that enables users to access multiple accounts by logging in using only one set of credentials. This eliminates the stress of having to remember multiple passwords as well as allows admins to manage all accounts and control which users have access to them. Normally, when you log in to an application, it will attempt to verify your identity before giving you access, requiring that you provide an email address, password, and sometimes an SMS or an email verification code. Once logged on, you are assigned a tracking code that essentially follows you around the web for the duration of your session, ensuring you don’t need to keep logging into the same website multiple times a day. Once the session ends, that code will expire and you will have to log in again to gain access. Single sign-on solutions use that same general process to achieve a slightly different result. SSO works based on a relationship established between the party that holds the identity information and can authenticate the user, called the identity provider (IdP), and the service provider (SP) or application the user wants to access. Rather than sending sensitive passwords back and forth across the internet, the IdP passes an assertion to authenticate the user for the SP. This is often done via an identity standard such as Security Assertion Markup Language (SAML), an XML-based open standard for transferring identity data between two parties.