SSO enhances the organization's user identity management and development efforts, as well as the user authentication experience across apps within the same organization. By leveraging Journeys, it keeps the authentication process tailored to specific business needs.
- Seamless cross-platform authentication: as your organization controls many applications, clients in the same Mosaic application use the same user pool and credentials, and clients in the same SSO client group may share a browser session, reducing password fatigue and enhancing the user experience.
- Custom login logics: SSO supports timed user sessions that begin at the first login and remain active for a timeframe defined by the organization. You can tailor your login logics based on the user session status (e.g., redirect authenticated users without password entry, prompt for minimal credentials like username only, or require full re-authentication) to fit your business needs.
- Customizable SSO groups: group clients within a Mosaic application according to which ones should share a browser session. Separate groups keep their sessions separate while using the same application user pool. Use separate Mosaic applications when you need isolated users and credentials.
The benefits of using SSO are:
- Seamless authentication flows: SSO journeys integrate natively SSO capabilities within customizable flows, allowing you to tailor the journey steps and the authentication methods involved to your specific business needs and users.
- Lighter user information management: clients in the same Mosaic application share user accounts and credentials, so users do not need to register separately for each client. SSO lets clients in the same group also share a browser session. This reduces the need for credential recovery, and the frequency of repeated logins.
- SSO inside the application: SSO is configured on the application, and the relying parties are configured as its clients, gathered into client groups. This streamlines integration by treating external apps as clients rather than separate entities.