# Best Single Sign-On (SSO) Software - Page 6 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Single sign-on (SSO) solutions are authentication tools that allows users to sign into multiple applications or databases with a single set of credentials. Federation is the linking of IT systems, organizations, and personal identities with credentials and repositories. The [best SSO solutions](https://learn.g2.com/best-sso-software) serve to simplify identification processes and create an uninhibited feel when working to access applications, portals, and servers. The software is designed to provide users with access to multiple applications or datasets without requiring multiple logins. The goal of SSO software is not only to improve ease of use while navigating across applications but also to minimize work for IT administrators and developers by centralizing access management. SSO products effectively join the desired applications and route logins through an SSO server. These solutions often include features such as dashboards for simplified navigation, application clouds, directory integration, and mobile applications for remote access. There is some crossover between SSO software and solution types such as [cloud identity and access management software](https://www.g2.com/categories/cloud-identity-and-access-management), [password management software](https://www.g2.com/categories/password-management), and [user provisioning/governance software](https://www.g2.com/categories/user-provisioning-governance), but single sign-on products focus mainly on secure enterprise access to servers, applications, and databases rather than the management of data or passwords. To qualify for inclusion in the SSO category, a product must: - Allow users access to multiple applications or databases through one portal - Automate authentication to prevent multiple logins - Centralize authentication servers across applications - Provide secure access to applications and data - Integrate login access to business applications ## Top Single Sign-On (SSO) Solutions at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Okta](https://www.g2.com/products/okta/reviews) | 4.5/5.0 (1,293 reviews) | SSO with automated provisioning across SaaS | "[Okta Makes IAM and SSO Seamless with Strong, Easy-to-Deploy MFA](https://www.g2.com/survey_responses/okta-review-13109287)" | | 2 | [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) | 4.5/5.0 (3,891 reviews) | Cloud directory SSO with cross-platform MDM | "[All-in-One Access and Device Management That Saves Time](https://www.g2.com/survey_responses/jumpcloud-review-12977315)" | | 3 | [Rippling IT](https://www.g2.com/products/rippling-it/reviews) | 4.7/5.0 (1,050 reviews) | HR-integrated SSO with automated provisioning | "[IT provisioning and app access made completely painless for everyday employees.](https://www.g2.com/survey_responses/rippling-it-review-13035351)" | | 4 | [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) | 4.5/5.0 (873 reviews) | Microsoft ecosystem SSO with conditional access | "[Entra ID P2 Makes Conditional Access and Security Policies Easy to Configure](https://www.g2.com/survey_responses/microsoft-entra-id-review-12889489)" | | 5 | [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews) | 4.5/5.0 (499 reviews) | MFA-enabled SSO with SAML flexibility | "[Effortless Security Compliance with Cisco Duo](https://www.g2.com/survey_responses/cisco-duo-review-12676028)" | | 6 | [1Password](https://www.g2.com/products/1password/reviews) | 4.6/5.0 (1,788 reviews) | Team password vaults with granular access control | "[Seamless, Simple Password Management Across Desktop and Mobile](https://www.g2.com/survey_responses/1password-review-12976873)" | | 7 | [LastPass](https://www.g2.com/products/lastpass/reviews) | 4.5/5.0 (2,040 reviews) | Password vault with secure credential sharing | "[Stress-Free Password Management with Seamless Autofill and Sync](https://www.g2.com/survey_responses/lastpass-review-12845237)" | | 8 | [Auth0](https://www.g2.com/products/auth0/reviews) | 4.3/5.0 (267 reviews) | Developer-first SSO with extensible authentication workflows | "[A strong option for B2B, Organizations, and more advanced access control](https://www.g2.com/survey_responses/auth0-review-13109133)" | | 9 | [Zscaler Private Access](https://www.g2.com/products/zscaler-private-access/reviews) | 4.4/5.0 (133 reviews) | Zero Trust application access replacing VPNs | "[Brilliant Zero Trust Secure Access That Replaces Traditional VPNs](https://www.g2.com/survey_responses/zscaler-private-access-review-12870112)" | | 10 | [Citrix Secure Private Access](https://www.g2.com/products/citrix-citrix-secure-private-access/reviews) | 4.5/5.0 (70 reviews) | VPN-less SSO with zero-trust remote access | "[Strong Security, Minor Connection Hiccups](https://www.g2.com/survey_responses/citrix-secure-private-access-review-12952066)" | ## G2 Grid® for Single Sign-On (SSO) Solutions ![G2 Grid® for Single Sign-On (SSO) Solutions plotting products by satisfaction and market presence](https://www.g2.com/categories/single-sign-on-sso/grids.png?focus%5B%5D=633&focus%5B%5D=1640029&focus%5B%5D=36316&focus%5B%5D=3899&focus%5B%5D=5282&focus%5B%5D=4533&focus%5B%5D=1718&focus%5B%5D=22264) Highlighted products: Okta, Rippling IT, JumpCloud, Microsoft Entra ID, Cisco Duo, 1Password, LastPass, and Auth0. Underlying data: [Grid® JSON](https://www.g2.com/categories/single-sign-on-sso/grids.json?focus%5B%5D=okta&focus%5B%5D=rippling-it&focus%5B%5D=jumpcloud&focus%5B%5D=microsoft-entra-id&focus%5B%5D=cisco-duo&focus%5B%5D=1password&focus%5B%5D=lastpass&focus%5B%5D=auth0) ## How Many Single Sign-On (SSO) Solutions Products Does G2 Track? **Total Products under this Category:** 172 ### Category Stats (Jul 2026) - **Average Rating**: 4.4/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: ID.me (+1.62%) - Among all products in this category, ID.me recorded the largest rating increase compared to last month *Last updated: July 16, 2026* ## How Does G2 Rank Single Sign-On (SSO) Solutions Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 18,000+ Authentic Reviews - 172+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Single Sign-On (SSO) Solutions Is Best for Your Use Case? - **Leader:** [Okta](https://www.g2.com/products/okta/reviews) - **Highest Performer:** [PingID](https://www.g2.com/products/ping-identity-pingid/reviews) - **Easiest to Use:** [Rippling IT](https://www.g2.com/products/rippling-it/reviews) - **Top Trending:** [Rippling IT](https://www.g2.com/products/rippling-it/reviews) - **Best Free Software:** [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) --- **Sponsored** ### Ory Ory offers a suite of cloud-native, open-source identity and access management solutions, including: Ory Kratos for configurable user management with features like MFA and social login; Ory Hydra for OAuth 2.0 and OpenID Connect authorization; Ory Polis for organization management and enterprise SSO; Ory Keto for a granular authorization system based on Google Zanzibar; Ory Oathkeeper, an identity and access proxy that enforces a Zero Trust security model; and Ory Talos to Transform API keys into dynamic controls for the agentic era . Deploy Your Way \* Ory Network - SaaS, instant on global identity system \* Ory Enterprise License - On-prem self-hosted option (same code as our SaaS offering) with enterprise support \* Open Source - Try Ory for your specific use cases (community supported) [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=254&secure%5Bchosen_at%5D=2026-07-16T19%3A08%3A09Z&secure%5Bdisplayable_resource_id%5D=254&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=254&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1197072&secure%5Bresource_id%5D=254&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fsingle-sign-on-sso%3Fpage%3D6&secure%5Btoken%5D=3b998e393093f0896bc36df77fd46023993c5826b2316bc2f15390b6bd6ea1a0&secure%5Burl%5D=https%3A%2F%2Fwww.ory.com%2Fpricing%2F&secure%5Burl_type%5D=custom_url) --- ## What Are the Top-Rated Single Sign-On (SSO) Solutions Products in 2026? ### 1. [Connectis](https://www.g2.com/products/connectis/reviews) Connectis is an identity infrastructure provider that connects organizations, sectors and nations **Who Is the Company Behind Connectis?** - **Seller:** [Connectis](https://www.g2.com/sellers/connectis) - **Year Founded:** 2006 - **HQ Location:** Trondheim, NO - **LinkedIn® Page:** https://www.linkedin.com/company/signicat (549 employees on LinkedIn®) ### 2. [Cross Identity](https://www.g2.com/products/cross-identity/reviews) Cross Identity is a cybersecurity company delivering Identity Security built as infrastructure, not a collection of tools. It is founded on a natively converged platform with a single codebase, designed to protect every digital identity across the enterprise while eliminating the complexity and risks of fragmented solutions. At its core, Cross Identity provides a natively converged identity platform that unifies traditional Identity and Access Management (IAM) functions, including Access Management (AM), Identity Governance & Administration (IGA), Privileged Identity & Access Management (PIAM), Cloud Infrastructure Entitlement Management (CIEM), Customer Identity & Access Management (CIAM), and Identity Risk Management (IRM) into a single solution, all built on a single codebase for performance, consistency, and resilience. Because the platform is purpose-built as Cybersecurity-as-an-Infrastructure, organizations gain consistent policy enforcement, unified visibility across identities, simplified operations, and faster deployment in as little as 9 weeks, without the overhead and attack surface of stitched-together tools. Cross Identity helps enterprises secure both human and non-human identities across cloud, on-premises, and hybrid environments, enabling continuous identity protection, real-time risk awareness, and stronger compliance across the digital ecosystem. **Who Is the Company Behind Cross Identity?** - **Seller:** [Cross Identity](https://www.g2.com/sellers/cross-identity) - **Year Founded:** 2017 - **HQ Location:** Schaumburg, US - **LinkedIn® Page:** http://www.linkedin.com/company/cross-identity (168 employees on LinkedIn®) ### 3. [Curity Identity Server](https://www.g2.com/products/curity-identity-server/reviews) Curity Identity Server offers a unique combination of API security and identity and access management. It is used for logging in and securing millions of users'​ access to the web and mobile apps over APIs and microservices. Curity is built upon established standards and designed for development and operations. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **Who Is the Company Behind Curity Identity Server?** - **Seller:** [Curity](https://www.g2.com/sellers/curity) - **Year Founded:** 2015 - **HQ Location:** Stockholm, Stockholm County, Sweden - **LinkedIn® Page:** https://www.linkedin.com/company/curity (49 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Curity Identity Server's Pros and Cons? **Pros:** - Authentication (1 reviews) - Easy Setup (1 reviews) - Implementation Ease (1 reviews) - Process Automation (1 reviews) - User Management (1 reviews) **Cons:** - Expensive (1 reviews) ### What Do G2 Reviewers Say About Curity Identity Server? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **easy setup** of Curity Identity Server, allowing them to focus on core business logic. - Users love the **easy setup** of Curity Identity Server, allowing focus on core business logic without authentication hassles. - Users find the **implementation ease** of Curity Identity Server allows them to focus on core business logic. - Users appreciate the **process automation** in Curity Identity Server, allowing them to focus on essential business logic. - Users appreciate the **easy setup of user management** , allowing them to focus on their core business logic effortlessly. **Cons:** - Users find the **pricing to be high** compared to other authorization services like LaunchDarkly or Permit.io. #### What Are Recent G2 Reviews of Curity Identity Server? **"[One solution for Authentication and User management](https://www.g2.com/survey_responses/curity-identity-server-review-8976050)"** **Rating:** 4.5/5.0 stars *— Vishwa R.* [Read full review](https://www.g2.com/survey_responses/curity-identity-server-review-8976050) --- ### 4. [cyberelements Access](https://www.g2.com/products/cyberelements-access/reviews) Secure identity provider and password vault for seamless yet secure access to application cyberelements Access is an access management (AM, Access Management), user authentication (UA, User Authentication) and unique authentication (SSO, Single Sign On) solution. It provides a secure and centralized management of credentials as well as enhances user authentication through Multi-Factor Authentication (MFA). It provides users with a seamless access experience and offers auditing and reporting features to meet legal and regulatory obligations, depending on the industry. cyberelements Access also drives performance and efficiency to the management of authentication resources, with solutions for application enrolment, enrolment of authentication devices (cards, keys, etc.), and a self-service portal for users who can unlock themselves, reducing the need to contact the organization's help desk. **Who Is the Company Behind cyberelements Access?** - **Seller:** [Systancia](https://www.g2.com/sellers/systancia) - **Year Founded:** 1998 - **HQ Location:** Sausheim, FR - **Twitter:** @Systancia (739 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/systancia/ (100 employees on LinkedIn®) ### 5. [Digitalresolve](https://www.g2.com/products/digitalresolve/reviews) A real-time behavioral monitoring, analytics and adaptive access control platform that proactively secures online accounts, information, transactions, and interactions from log in to log out **Who Is the Company Behind Digitalresolve?** - **Seller:** [Digital Resolve](https://www.g2.com/sellers/digital-resolve) - **Year Founded:** 2004 - **HQ Location:** Peachtree Corners, US - **LinkedIn® Page:** https://www.linkedin.com/company/digital-resolve/ (1 employees on LinkedIn®) ### 6. [Entrust Identity Essentials](https://www.g2.com/products/entrust-identity-essentials/reviews) Entrust Identity Essentials is a cost-effective, easy-to-deploy on-premises multi-factor authentication (MFA) solution that lets Windows-based organizations realize a Zero Trust approach to security. Entrust Identity Essentials is an out-of-the-box MFA solution that can be installed in less than five minutes, with no disruption to users. It works with your existing Microsoft environment, including Active Directory (AD) and Active Directory Federation Service (ADFS) for user synchronization. Available authenticators include SMS, email, voice, and OTP. There's also an option to leverage smart phone biometrics including fingerprint and facial match. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Entrust Identity Essentials?** - **Seller:** [Entrust, Inc.](https://www.g2.com/sellers/entrust-inc) - **Year Founded:** 1969 - **HQ Location:** Minneapolis, MN - **Twitter:** @Entrust_Corp (6,414 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/entrust/ (3,751 employees on LinkedIn®) - **Phone:** 1-888-690-2424 **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Entrust Identity Essentials? **"[Necessary for IAM](https://www.g2.com/survey_responses/entrust-identity-essentials-review-8209987)"** **Rating:** 4.0/5.0 stars *— Serena L.* [Read full review](https://www.g2.com/survey_responses/entrust-identity-essentials-review-8209987) --- ### 7. [Evidian Enterprise SSO](https://www.g2.com/products/evidian-enterprise-sso/reviews) With Evidian Enterprise SSO access will be more quickly and securely available. Settings are managed and applied automatically. Evidian Identity & Access Manager will bring real changes to the daily routine of everyone in your company. **Who Is the Company Behind Evidian Enterprise SSO?** - **Seller:** [Eviden](https://www.g2.com/sellers/eviden) - **HQ Location:** Bezons, FR - **LinkedIn® Page:** https://www.linkedin.com/company/eviden/ (13,900 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are G2 Users Discussing About Evidian Enterprise SSO? - [What is Evidian Enterprise SSO used for?](https://www.g2.com/discussions/evidian-enterprise-sso-what-is-evidian-enterprise-sso-used-for) - [What is Evidian Enterprise SSO used for?](https://www.g2.com/discussions/what-is-evidian-enterprise-sso-used-for) ### 8. [Evidian Identity Governance and Administration](https://www.g2.com/products/evidian-identity-governance-and-administration/reviews) Manage identities accuretly, efficiently and confidentialy **Who Is the Company Behind Evidian Identity Governance and Administration?** - **Seller:** [Eviden](https://www.g2.com/sellers/eviden) - **HQ Location:** Bezons, FR - **LinkedIn® Page:** https://www.linkedin.com/company/eviden/ (13,900 employees on LinkedIn®) ### 9. [Evo Security](https://www.g2.com/products/evo-security/reviews) vo Security is a multi-tenant Identity and Access Management (IAM) platform built exclusively for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs). Headquartered in Austin, Texas, and backed by industry leaders, we were founded by cybersecurity professionals determined to help IT service providers protect their small to mid-market clients from the most common cyberthreat: compromised credentials. Our platform combines Multi-Factor Authentication (MFA), Single Sign-On (SSO), RADIUS Authentication, Help Desk Verification, and Privileged Access Management (PAM) into a single, user-friendly interface. By delivering these core security tools in one solution, Evo Security saves MSPs time, reduces complexity, and boosts profitability with better gross margins. Most importantly, Evo Security tackles the rising threat of stolen credentials by simplifying how MSPs and MSSPs manage user access. We help administrators and end-users alike enjoy a seamless experience, reinforcing the crucial balance between strong security and efficient operations—all from a single dashboard built with the IT channel in mind. One agent. One dashboard. Total identity management. Built for MSPs. **Who Is the Company Behind Evo Security?** - **Seller:** [Evo Security](https://www.g2.com/sellers/evo-security) - **Year Founded:** 2018 - **HQ Location:** Austin, US - **LinkedIn® Page:** https://www.linkedin.com/company/evo-security/ (38 employees on LinkedIn®) ### 10. [GateKeeper Proximity Authentication](https://www.g2.com/products/gatekeeper-proximity-authentication/reviews) Proximity MFA for shared workstations. MFA for Shared Computers is a cutting-edge security solution designed to enhance user authentication and access control in environments where multiple users share computing resources. This innovative approach allows individuals to log in using their physical presence rather than traditional passwords, creating a seamless and secure experience across computers, VPNs, websites, and desktop applications. Patented and designed for rugged environments including law enforcement, healthcare, manufacturing (ICS/OT cybersecurity), and compliance. Targeted primarily at organizations that require stringent security measures, such as healthcare providers, financial institutions, and government agencies, this solution addresses common challenges associated with password management. By eliminating the need for users to remember or type passwords, it significantly reduces the risk of forgotten credentials, password resets, and the chaos that often accompanies password management. The continuous authentication feature ensures that users remain securely logged in as long as they are present, while automatically locking the system when they step away, thus preventing unauthorized access. Key features of MFA for Shared Computers include passwordless proximity login, which utilizes a wireless key to authenticate users effortlessly. This technology allows passwords to auto-fill across various platforms, including electronic health records (EHRs) like Allscripts PM and eClinicalWorks, as well as web applications such as Office365 and banking sites. The solution integrates seamlessly with existing systems such as Active Directory, Okta, and RADIUS, ensuring that organizations can maintain their current infrastructure while enhancing security protocols. The benefits of adopting this solution extend beyond mere convenience. Organizations can automate access control and ensure compliance with various regulatory standards, including CMMC, CJIS, HIPAA, and NIS2. By streamlining user authentication processes, businesses can improve productivity while maintaining a high level of security. The ability to manage passwords efficiently across shared computers not only enhances user experience but also fortifies overall organizational security, making it an essential tool for any entity looking to safeguard sensitive information in a shared computing environment. **Average Rating:** 4.9/5.0 **Total Reviews:** 41 **How Do G2 Users Rate GateKeeper Proximity Authentication?** - **Has the product been a good partner in doing business?:** 9.9/10 (Category avg: 8.9/10) **Who Is the Company Behind GateKeeper Proximity Authentication?** - **Seller:** [Untethered Labs](https://www.g2.com/sellers/untethered-labs) - **Company Website:** https://www.gkaccess.com - **Year Founded:** 2015 - **HQ Location:** Greenbelt, MD - **Twitter:** @gkaccess (1,989 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5370448/ (19 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Hospital & Health Care, Electrical/Electronic Manufacturing - **Company Size:** 40% Small-Business, 37% Mid-Market #### What Are GateKeeper Proximity Authentication's Pros and Cons? **Pros:** - Ease of Use (13 reviews) - Security (12 reviews) - Implementation Ease (8 reviews) - Customer Support (7 reviews) - Secure Sharing (7 reviews) **Cons:** - Authentication Issues (2 reviews) - Difficult Learning (2 reviews) - Limited Compatibility (2 reviews) - App Issues (1 reviews) - Data Security (1 reviews) ### What Do G2 Reviewers Say About GateKeeper Proximity Authentication? *AI-generated summary from verified user reviews* **Pros:** - Users love the **ease of use** of GateKeeper Proximity Authentication, making password management and logins effortless and intuitive. - Users value the **enhanced security** of GateKeeper Proximity Authentication, providing seamless logins and robust password management. - Users find the **implementation easy** with quick setup, making the product reliable and efficient for various tasks. - Users commend the **excellent customer support** of GateKeeper Proximity Authentication, praising their reliability and responsiveness. - Users appreciate the **secure sharing features** of GateKeeper, enhancing both safety and ease of access to resources. **Cons:** - Users face **authentication issues** related to proprietary tokens, raising concerns about security and usability. - Users face a **difficult learning curve** with GateKeeper Proximity Authentication, requiring multiple trainings for full understanding. - Users face **limited compatibility** due to insufficient Android app availability and technology constraints affecting signal strength. - Users are concerned about **app issues** such as biometric data privacy and potential insider threats impacting security. - Users express concerns about **biometric data privacy** and **insider threats** , raising issues of security fatigue with GateKeeper. #### What Are Recent G2 Reviews of GateKeeper Proximity Authentication? **"[Gatekeeper is a lifesaver for Manufacturing](https://www.g2.com/survey_responses/gatekeeper-proximity-authentication-review-11166996)"** **Rating:** 5.0/5.0 stars *— tom r.* [Read full review](https://www.g2.com/survey_responses/gatekeeper-proximity-authentication-review-11166996) --- **"[Easy Tracking and Maintenance That Works Great for Our Organization](https://www.g2.com/survey_responses/gatekeeper-proximity-authentication-review-12703434)"** **Rating:** 5.0/5.0 stars *— Kelsie D.* [Read full review](https://www.g2.com/survey_responses/gatekeeper-proximity-authentication-review-12703434) --- #### What Are G2 Users Discussing About GateKeeper Proximity Authentication? - [What is GateKeeper Proximity Authentication used for?](https://www.g2.com/discussions/what-is-gatekeeper-proximity-authentication-used-for) - 1 upvote ### 11. [Hideez Workforce Identity Service](https://www.g2.com/products/hideez-workforce-identity-service/reviews) Hideez Workforce Identity System is an innovative passwordless IAM platform that provides secure and user-friendly workforce authentication. It combines the benefits of passwordless Single Sign-On (SSO) and multi-factor authentication (MFA) with proximity-based Windows logins/logouts and password-based access to legacy apps, allowing employees to use a variety of modern authentication methods: - Passkeys integrated with personal devices (fingerprint/face recognition on Android, Touch/Face ID on iOS, and Windows Hello) - Hideez Authenticator app (iOS and Android) - Hideez Keys - Other FIDO-certified tokens (YubiKeys, Feitian, etc.) Hideez seamlessly integrates with Microsoft Active Directory and Azure AD, ensuring secure access to websites and apps and bridging the gap between password-based and passwordless authentication. On-premise deployment is available upon request, offering further customization and control. To learn more about Hideez and its products, please visit www.hideez.com. **Who Is the Company Behind Hideez Workforce Identity Service?** - **Seller:** [Hideez](https://www.g2.com/sellers/hideez) - **Year Founded:** 2017 - **HQ Location:** Wilmington, US - **LinkedIn® Page:** https://www.linkedin.com/company/hideezkey/ (12 employees on LinkedIn®) ### 12. [Identity Confluence](https://www.g2.com/products/identity-confluence/reviews) Identity Confluence is an AI-powered Identity Security and Governance platform designed to eliminate identity blind spots and automate lifecycle management across cloud, on-premises, and hybrid environments. As organizations scale, identities expand beyond employees to include service accounts, API clients, bots, and machine workloads. Without centralized governance, these identities create excessive privileges and compliance risk. Identity Confluence unifies identity intelligence, governance automation, and compliance management into a single platform that enables enterprises to: 1. Gain full visibility into human and non-human identities 2. Automate onboarding, role transitions, and offboarding workflows 3. Conduct intelligent, risk-based access certification campaigns 4. Detect and remediate Segregation of Duties (SoD) violations 5. Enforce least privilege access across hybrid environments 6. Centralize audit evidence within a built-in Evidence Center 7. Integrate with 250+ enterprise applications for rapid deployment\ Built for modern Identity Security teams, Identity Confluence provides a clear understanding of who (and what) has access, why that access exists, and how to continuously govern and enforce it. The outcome: reduced identity risk, faster compliance cycles, streamlined audits, and scalable governance aligned with Zero Trust principles. **Who Is the Company Behind Identity Confluence?** - **Seller:** [Tech Prescient](https://www.g2.com/sellers/tech-prescient) - **Year Founded:** 2017 - **HQ Location:** Pune, IN - **LinkedIn® Page:** https://www.linkedin.com/company/tech-prescient (93 employees on LinkedIn®) ### 13. [IdRamp](https://www.g2.com/products/idramp/reviews) IdRamp offers a decentralized identity orchestration platform designed to simplify and secure identity management for enterprises. By integrating decentralized identity solutions, IdRamp enables organizations to manage digital identities without the complexities of traditional centralized systems. This approach enhances security, reduces operational costs, and improves user experience by eliminating the need for passwords and minimizing data replication. Key Features and Functionality: - Decentralized Authentication: Utilizes distributed systems to authenticate users, enhancing reliability and security while eliminating the need for public network-facing identity and access management systems. - Credential Management: Provides digital credentials for various use cases, including identity verification, supply chain management, and product certification, with adaptable workflows to suit business needs. - Password Elimination: Enhances user experience and security by offering password-free access to applications and services, replacing traditional credentials with cryptographic keys. - Interoperability: Seamlessly integrates with existing identity management platforms, such as Azure AD, Okta, and ForgeRock, without requiring significant infrastructure changes. - Zero-Code Deployment: Facilitates easy integration with existing services and systems without the need for custom development, enabling quick adoption across various digital ecosystems. Primary Value and Solutions Provided: IdRamp addresses the challenges of managing an increasing number of digital identities and application relationships by offering a decentralized identity strategy. This approach allows organizations to maintain control over when and how they share information, providing the least access required without exposing networks to partners or third parties. By reducing complexity and distributing attack vectors, IdRamp enhances security and operational efficiency. Additionally, IdRamp's platform supports various use cases, including multi-factor authentication, passwordless authentication, biometric authentication, identity proofing, and account recovery. These capabilities help organizations fortify authentication security, eliminate password-associated vulnerabilities, and automate manual tasks like account creation, thereby improving user experience and reducing operational costs. By leveraging IdRamp's decentralized identity orchestration, enterprises can streamline identity management processes, enhance security, and accelerate digital transformation efforts without the need for extensive infrastructure overhauls. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind IdRamp?** - **Seller:** [idRamp](https://www.g2.com/sellers/idramp) - **Year Founded:** 2019 - **HQ Location:** Indianola, US - **LinkedIn® Page:** https://www.linkedin.com/company/7938545/ (5 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are IdRamp's Pros and Cons? **Pros:** - Data Security (1 reviews) - Decentralized Identity (1 reviews) - Security (1 reviews) **Cons:** - Data Breach (1 reviews) - Security Concerns (1 reviews) - Security Issues (1 reviews) - Security Vulnerabilities (1 reviews) ### What Do G2 Reviewers Say About IdRamp? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **data security** of IdRamp, feeling confident and trusted in their digital identity management. - Users love the **trustworthy decentralized identity** that IdRamp provides, ensuring a reliable digital experience without frustrations. - Users value the **trustworthy digital security** provided by IdRamp, ensuring peace of mind in identity management. **Cons:** - Users express concern over **trust issues related to data breaches** when utilizing IdRamp's third-party platform. - Users express **trust issues** regarding data security with IdRamp, concerned about potential misuse by third-party platforms. - Users express concerns about **trust issues** related to third-party data handling and potential misuse of information. - Users express **trust issues regarding data security** when relying on IdRamp's third-party platform, raising concerns about potential misuse. #### What Are Recent G2 Reviews of IdRamp? **"[Best identity evolution company](https://www.g2.com/survey_responses/idramp-review-7944457)"** **Rating:** 4.0/5.0 stars *— Bhautik M.* [Read full review](https://www.g2.com/survey_responses/idramp-review-7944457) --- ### 14. [Ilex](https://www.g2.com/products/ilex-international-ilex/reviews) We offer a full platform and proven expertise to support your identity and access management (IAM) strategy **Who Is the Company Behind Ilex?** - **Seller:** [Ilex International](https://www.g2.com/sellers/ilex-international) - **Year Founded:** 1970 - **HQ Location:** Clichy, FR - **LinkedIn® Page:** https://www.linkedin.com/company/nexpublica/ (485 employees on LinkedIn®) ### 15. [Ironchip](https://www.g2.com/products/ironchip/reviews) Ironchip is the next-generation Identity solution based on zero-knowledge proofs that helps you achieve your company's security dream: Zero Accounts Takeover. We provide a passwordless and codeless solution that prevents and detects phishing attacks, man-in-the-middle attacks, and account takeovers. We use unspoofable location, device intelligence, and user behavior to verify your identity, providing two solutions: an identity platform for your employees and a fraud detection solution for your end-users. **Average Rating:** 3.5/5.0 **Total Reviews:** 1 **Who Is the Company Behind Ironchip?** - **Seller:** [Ironchip](https://www.g2.com/sellers/ironchip) - **Year Founded:** 2017 - **HQ Location:** Barakaldo, ES - **LinkedIn® Page:** https://www.linkedin.com/company/ironchip/ (35 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise ### 16. [iWelcome IDaaS](https://www.g2.com/products/iwelcome-idaas/reviews) iWelcome provides Identity & Access Management as-a-Service (IDaaS). With iWelcome’s cloud platform, organisations manage the identity lifecycle, the profiles and the access rights of their consumers, employees & business partners in a user friendly and secure manner. Our platform and organisation are engineered to facilitate the scalability, complexity, privacy and security requirements of medium and large enterprise and government organisations. iWelcome is a 100% European company and resides in European data centres. **Who Is the Company Behind iWelcome IDaaS?** - **Seller:** [Thales Group](https://www.g2.com/sellers/thales-group) - **HQ Location:** Austin, Texas - **Twitter:** @ThalesCloudSec (6,935 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/thalessoftwaremonetization/ (46 employees on LinkedIn®) - **Ownership:** EPA:HO - **Total Revenue (USD mm):** $15,854 ### 17. [JOSSO](https://www.g2.com/products/josso/reviews) JOSSO is an open source identity and access management solution focused on streamlining implementations through a visual modeling and generative approach. Founded in 2004, it is used by around 4,000 organizations worldwide. **Who Is the Company Behind JOSSO?** - **Seller:** [Atricore](https://www.g2.com/sellers/atricore) - **Year Founded:** 2007 - **HQ Location:** Sausalito, US - **LinkedIn® Page:** https://www.linkedin.com/company/atricore/ (6 employees on LinkedIn®) ### 18. [Kantega Single Sign-On](https://www.g2.com/products/kantega-single-sign-on/reviews) Kantega Single Sign-On (SSO) is an add-on for Atlassian software such as Confluence, Jira, Bitbucket, Fisheye/Crucible and Bamboo. We believe in empowering user management, which means we provide effortless login for everyone, from everywhere. The combination of our extensive User Cleanup feature in the latest version of Kantega SSO Enterprise 6.1.0, and Just-In-Time Provisioning provides you with the tools you need to save valuable time and money on user management and security aspects. **Who Is the Company Behind Kantega Single Sign-On?** - **Seller:** [Kantega SSO Enterprise](https://www.g2.com/sellers/kantega-sso-enterprise) - **Year Founded:** 2018 - **HQ Location:** Trondheim, NO - **LinkedIn® Page:** https://www.linkedin.com/company/kantegasso (8 employees on LinkedIn®) ### 19. [Kelvin Zero](https://www.g2.com/products/kelvin-zero/reviews) Kelvin Zero is a technology leader revolutionizing digital security with Multi-Pass, a next-gen passwordless solution built for highly regulated institutions. Combining biometric smart card and enterprise passkey technology, Multi-Pass eliminates phishable factors of authentication and enables organizations to securely access to all their resources with a complete solution for their full range of workforce and customer users. To find out more about Multi-Pass and how Kelvin Zero can help your organization make the passwordless jump, visit www.kzero.com. **Who Is the Company Behind Kelvin Zero?** - **Seller:** [Kelvin Zero](https://www.g2.com/sellers/kelvin-zero) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 20. [KillerID SSO](https://www.g2.com/products/killerid-sso/reviews) KillerID is the leading provider of Custom Single Sign On (SSO) login for Google Workspace domains, user account management automation, and domain level access protection. **Who Is the Company Behind KillerID SSO?** - **Seller:** [Netkiller](https://www.g2.com/sellers/netkiller) - **Year Founded:** 2005 - **HQ Location:** Palo Alto, California - **Twitter:** @netkiller_cloud (54 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1644003 (29 employees on LinkedIn®) ### 21. [LogMote](https://www.g2.com/products/logmote/reviews) Manage and secure access to online business resources as well as traditional business applications. **Who Is the Company Behind LogMote?** - **Seller:** [LogMote](https://www.g2.com/sellers/logmote) - **Year Founded:** 2011 - **HQ Location:** PARIS, FR - **LinkedIn® Page:** https://www.linkedin.com/company/logmote/ (1 employees on LinkedIn®) ### 22. [MATESO Password Safe](https://www.g2.com/products/mateso-password-safe/reviews) MATESO's Password Secure is a comprehensive password management solution designed to safeguard business information and critical data. It enables teams to securely create, store, and manage passwords, ensuring accessibility from any location and device. With robust data compliance measures, Password Secure protects sensitive information in line with stringent data regulations. The platform facilitates seamless collaboration by allowing secure data sharing among team members. Additionally, it offers flexible deployment options, enabling organizations to store data on-premises, in the cloud, or through a hybrid approach, thereby maintaining full control over data management. Key Features and Functionality: - Security: Ensures robust data compliance, protecting sensitive information in accordance with stringent data regulations. - Teamwork: Facilitates effortless collaboration by enabling secure data sharing among team members. - Flexibility: Offers customizable deployment options, allowing data storage on-premises, in the cloud, or through a hybrid model. - Self-Hosted Option: Provides organizations with full control over data by storing it on their own servers, whether on-premises, in the cloud, or hybrid. - Managed Service: Offers a managed service option, particularly beneficial for SMEs, with setup, maintenance, and management handled by certified partners. Primary Value and User Solutions: Password Secure addresses the critical need for secure and efficient password management within organizations. By centralizing password storage and management, it mitigates risks associated with weak or compromised passwords, enhances compliance with data protection regulations, and streamlines access for employees across various locations and devices. The platform's flexibility in deployment ensures that businesses can tailor the solution to their specific needs, maintaining control over their data while benefiting from enhanced security and collaboration capabilities. **Who Is the Company Behind MATESO Password Safe?** - **Seller:** [MATESO](https://www.g2.com/sellers/mateso) - **HQ Location:** Frisco, Texas, United States - **LinkedIn® Page:** https://www.linkedin.com/company/netwrix-corporation/ (752 employees on LinkedIn®) ### 23. [MemberProtect](https://www.g2.com/products/memberprotect/reviews) Uses encryption to secure databases at the cell level and can encrypt email messages and flat files on your network. **Who Is the Company Behind MemberProtect?** - **Seller:** [InetSolution](https://www.g2.com/sellers/inetsolution) - **Year Founded:** 1998 - **HQ Location:** Troy, US - **LinkedIn® Page:** https://www.linkedin.com/company/inetsolution/ (19 employees on LinkedIn®) ### 24. [mPass](https://www.g2.com/products/mpass/reviews) mPass is a multifactor authentication solution that provides better security for any organization looking to protect its employees from fraud attacks, phishing, and password related attacks. **Who Is the Company Behind mPass?** - **Seller:** [CEREBRA](https://www.g2.com/sellers/cerebra-5d81a0ab-01cf-422f-aa38-0dbde85e828c) - **Year Founded:** 2020 - **HQ Location:** Riyadh, SA - **LinkedIn® Page:** http://www.linkedin.com/company/cerebra-tec (60 employees on LinkedIn®) ### 25. [Mumba ACCESS](https://www.g2.com/products/mumba-access/reviews) Mumba Access is a SaaS solution that enables business leaders to carry out any strategic, tactical or operational initiatives that involve the whole workforce. It includes two distinct products: Mumba IAM and Mumba Front Door. Today, there are few reliable ways for business leaders to reach their deskless workers (think email, SMS, posters, and word of mouth). This lack of connection leads to shallow levels of employee engagement and, at worst, a lack of capability to deal with critical, operational and social business issues. The solution delivers a one-stop-shop app on each person's phone, creating a direct connection to the business and letting senior executives carry out all types of initiatives that require the participation of the whole workforce. Mumba IAM is the only Identity Management Access product focused solely on the deskless workforce. This is done in combination with Mumba Front Door, delivering a singular APP experience perfect for mobile devices - and also works beautifully within browsers for office-based workers. Mumba IAM and Mumba Front Door deliver a unique and powerful combination to truly enable your workforce and unleash operational initiatives at scale, without massive overheads or complex change management. **Who Is the Company Behind Mumba ACCESS?** - **Seller:** [Mumba Cloud](https://www.g2.com/sellers/mumba-cloud) - **Year Founded:** 2010 - **HQ Location:** Surry Hills, AU - **Twitter:** @MumbaCloud (1,372 Twitter followers) - **LinkedIn® Page:** http://www.linkedin.com/company/mumba-corp. (44 employees on LinkedIn®) ## What Is Single Sign-On (SSO) Solutions? [Identity Management Software](https://www.g2.com/categories/identity-management) ## What Software Categories Are Similar to Single Sign-On (SSO) Solutions? - [User Provisioning and Governance Tools](https://www.g2.com/categories/user-provisioning-and-governance-tools) - [Identity and Access Management (IAM) Software](https://www.g2.com/categories/identity-and-access-management-iam) - [Multi-Factor Authentication (MFA) Software](https://www.g2.com/categories/multi-factor-authentication-mfa) - [Risk-Based Authentication Software](https://www.g2.com/categories/risk-based-authentication-rba) - [Customer Identity and Access Management (CIAM) Software](https://www.g2.com/categories/customer-identity-and-access-management-ciam) - [Biometric Authentication Software](https://www.g2.com/categories/biometric-authentication) - [Passwordless Authentication Software](https://www.g2.com/categories/passwordless-authentication) --- ## How Do You Choose the Right Single Sign-On (SSO) Solutions? ### What You Should Know About Single Sign-On Solutions ### What are Single Sign-On (SSO) Solutions? Single sign-on (SSO) solutions are user authentication solution that helps companies secure access to business applications and assets. It does so while also providing end users with a convenient, easy-to-use portal that requires them only to sign in and authenticate once to access multiple corporate applications and resources.  SSO solutions share authentication sessions between a trusted identity provider, which manages digital identities and applications. In practice, commonly, an identity provider requires the user to log in and authenticate; the identity provider then shares this authentication session with other applications by passing digitally signed tokens for the receiving application to verify that it is coming from a trusted provider before granting the user with access to the application. If the user identity token is accepted, the user is automatically granted access to the application. Companies use SSO software mainly to improve security and enhance the end-user sign-on experience, whether that be internal employees, end customers, or corporate business partners. SSO solutions also centralizes user access management, thus reducing the security management burden on administrators. Using an SSO solution, IT administrators can reduce or eliminate common time-consuming tasks like password resets. SSO products contain features that benefit both end users and administrators. For end users, this includes an easy-to-use user portal, intuitive authentication, and often a mobile application. For administrators, these solutions often include an identity directory or directory integrations, multiple multi-factor authentication (MFA) methods, audit features, and prebuilt application integrations.  **What Does SSO Stand For?** SSO most commonly stands for single sign-on. The acronym SSO is less frequently used to describe same sign-on, which is different from single sign-on; same sign-on does not rely on trusted tokens, but rather credential sharing. Rarely, the acronym SSO is used to describe single sign-out. Other common acronyms people may encounter regarding SSO products include: FIM: federated identity management, of which SSO is a part IAM: identity and access management IdP: identity provider JWT: JSON Web Token, a protocol commonly used in business-to-consumer (B2C) SSO applications LDAP: lightweight directory access protocol, an open protocol used for directory services authentication MFA: multi-factor authentication OIDC: OpenID Connect, an authentication protocol OAuth: an open standard authentication protocol SAML: Security Assertion Markup Language, an open standard used for SSO solutions #### What Types of Single Sign-On (SSO) Solutions Exist? **Business to employee (B2E)** Companies use B2E SSO solutions to securely manage their employees’ access to corporate accounts, provide an easy-to-use user experience, and reduce user need for IT administrators services. **Business to business (B2B)** Companies use B2B SSO solutions to enable their business partners and corporate customers to best utilize the company’s services, using the partner or corporate customer’s preferred identity providers. **Business to consumer (B2C) or customer identity and access management (CIAM)** In B2C or CIAM use cases, customers are able to sign into other accounts and connect them to the business’ app to provide an SSO experience. Most commonly, customers authenticate using social media identity providers like Facebook or Google enabling them access to connected accounts. ** ** ### What are the Common Features of Single Sign-On (SSO) Solutions? The following are some core features within SSO solutions that can help users and administrators. **User portal:** User portals provide an intuitive, easy-to-use end-user interface. **Mobile app:** Many SSO solutions offer a mobile app for end users to both authenticate and access the SSO solution from their mobile devices. **MFA methods:** Most SSO providers offer multiple authentication methods to end users, from software or hardware token-based authentication, to mobile push, passwordless authentication, biometric authentication, or one-time passcodes (OTPs).  **Adaptive or contextual access:** Some SSO software offers advanced authentication tools, such as adaptive or contextual access. Using machine learning to understand a user’s contextual use of the SSO product, such as location, IP address, time, and other real-time factors to create a user baseline profile. This profile is then used to determine anomalous access activity to prevent access when risk is deemed too high. **Directory or integration:** To assist with user provisioning and management, SSO solutions either integrate with standard directories, such as Microsoft Active Directory, LDAP-based directories, or Google Cloud Directory or offer their own cloud directories built into the SSO software. **Prebuilt integration application catalog:** SSO solutions commonly provide prebuilt integrations to widely used SaaS applications, which are available on an application catalog. **Role management:** SSO solutions assist administrators with user provisioning and assigning permissions based on user role for access control. **Audit features** : Audit features provide administrators audit logs to monitor user access. ### What are the Benefits of Single Sign-On (SSO) Solutions? **Increases security:** The main benefit of using an SSO solution is for securing user access to company applications and other resources through user authentication. **Reduces password authentication risk:** Since users must only sign in and authenticate once to access multiple applications, SSO solutions reduce the risks associated with poor password management and using only a single factor for authentication. **Saves users time and frustration:** SSO solutions reduce the number of logins end users such as employees or customers must remember and SSO solutions reduce user frustration when switching between multiple applications once authenticated. **Saves administrators time and money:** Users can access their accounts in one centralized location, reducing the number of calls to administrators for password resets, saving time and, therefore money on labor costs. **Seamless experience across assets:** SSO solutions reduce login friction for end users once authenticated and give them access to multiple accounts.  **Centralizes consumer profiles:** SSO software consolidates end-user experiences in one tool to provide a centralized view of end-user or customer data. ### Who Uses Single Sign-On (SSO) Solutions? **Systems administrators:** Systems administrators are responsible for deploying and managing a company’s SSO solutions. **Employees:** Employees are end users of SSO solutions in a B2E use case to sign on and authenticate with the user portal to access their corporate accounts. **Customers:** Customers are end users of SSO solutions in a B2C use case and sign in and authenticate using an identity provider, often a social media account, to access a business’ applications. **Business contacts:** Companies may use SSO software to enable their business partners and corporate customers to securely authenticate and access the company’s assets, often with multiple identity providers. #### Software Related to Single Sign-On (SSO) Solutions Related solutions that can be used together with SSO software include: [Identity and access management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) **:** For employee use cases, IAM software offers broader identity solutions, of which SSO is often a part. IAM software authenticates users, provides access to systems and data based on company policies, tracks user activity, and provides reporting tools to ensure employees comply with company policies and regulations. [Customer identity and access management (CIAM) software](https://www.g2.com/categories/customer-identity-and-access-management-ciam) **:** For customer use cases, CIAM software provides robust identity functionality. CIAM software enables businesses to centralize and manage customer identities, preferences, and profile information at scale while offering customers self-registration options. [Password manager software](https://www.g2.com/categories/password-manager) **:** Password managers are secure repositories that store individual user passwords, much like a vault. SSO solutions differs from password managers because SSO software provides authentication before granting a trusted token, not an actual password, for access to an application.  [SaaS operations management software](https://www.g2.com/categories/saas-operations-management) **:** SaaS operations management software tools enable businesses to manage, govern, and secure their SaaS product portfolios; many of these tools integrate with SSO solutions to manage user permissions. **   ** [SaaS spend management software](https://www.g2.com/categories/saas-spend-management) **:** This software enables companies to manage SaaS utilization to identify cost savings. Many of these tools integrate with SSO software to manage end-user utilization of SaaS subscriptions. ### Challenges with Single Sign-On (SSO) Solutions Software solutions can come with their own set of challenges. Issues to consider include:  **Legacy applications** : SSO tools may not integrate with legacy applications; a solution to overcome this may include password vaulting tools within the SSO software to provide the end user with ease of use, despite not technically functioning as SSO regarding authentication.  **High availability:** It is important that the SSO provider has high availability to avoid users being locked out of their systems; with applications managed centrally with an SSO solution, any downtime can prevent end users from accessing their applications and resources. If a company has mission-critical applications that must be available 24/7, many companies will not integrate these tools with SSO providers and instead log in and authenticate separately. ### Which Companies Should Buy Single Sign-On (SSO) Solutions? All companies can benefit from securing their login process to corporate assets. **Companies securing employees:** Companies of all sizes that want to secure their employees’ access to corporate applications use SSO solutions. **Companies securing customers:** Companies that want to enable their customers to provide self service to securely authenticate and login to applications use SSO solutions. **Companies securing partners:** Companies that want to secure their partners and contractors access to corporate applications use SSO solutions. ### How to Buy Single Sign-On (SSO) Solutions #### Requirements Gathering (RFI/RFP) for Single Sign-On (SSO) Software Prior to selecting an SSO software service provider or solution, buyers must consider what factors are important to the company, which may include: **End-user use case:** Buyers must determine their end users—whether employees, customers, or business partners—to determine what kind of SSO solution works best for these constituencies. **Cloud vs. on-premises application support:** The buyer should determine what applications and company resources will be connected to the SSO software. For applications that need high availability (24/7), they may not wish to connect those in case of downtime with the SSO provider. Many SSO providers offer prebuilt integrations with the most popular business software. If the business has applications that are custom-built, legacy, or on-premises, those may need integrations built to connect with the SSO. Another workaround would be to use a password vault within an SSO solution for legacy applications that are difficult to connect. **Federation protocols** : If the organization needs to integrate with multiple identity providers outside of the organization, especially for authenticating business partners, FIM can achieve this. Federation protocols include SAML 1.1, SAML2, WS-Federation, OAuth2, OpenID Connect, WS-Trust, and other protocols. **Authentication type** : The company should ensure that the authentication types its employees, customers, or partners will use are supported by the SSO solution of choice. This may include software or hardware-token-based authentication for employees and OTPs via email, SMS, or phone for customers, among many other authentication methods. Many SSO solutions now offer contextual or risk-based authentication measures to learn user behaviors, identify patterns, and thus provide risk-based assessments when the authentication process does not meet typical patterns.  **Mobile app** : If end users will access corporate applications from mobile devices, ensure the SSO software provider’s mobile app meets particular business needs.  **Developer support** : Buyers must ensure the SSO provider has the developer support the team requires, including software development kits (SDKs) and application programming interface (API) lifecycle management functions, particularly for B2C SSO use cases.  **Meets security standards** : SSO is a security tool providing users with authenticated access to their company resources. It is important that the SSO service provider meet security standards that are important to the company, which may include ISO 27017, ISO 27018, ISO 27001, SOC 2 Type 2, and others.  #### Compare Single Sign-On Software (SSO) Products **Create a long list** Buyers should create a long list of software solutions by researching on g2.com, by reading real-user reviews, seeing how vendors compare on G2 Grid® reports, and saving the software selections to “My List” to reference them in the future. Using g2.com, users can learn about which solutions are most often used in the geographic market and which ones are best for every business segment size—whether that is for small, medium, and enterprise businesses. **Create a short list** After creating a long list of vendors, buyers must do further research to narrow down the selections. Using g2.com’s compare feature, they can stack specific software up side by side to learn about how real users of the software rate their functionality. G2 also has quarterly reports showcasing users’ perception of return on investment (in months), the software provider’s average implementation time in months, usability scores, and many other factors. **Conduct demos** Up next is time to demo the products. Many vendors enable buyers to contact them directly from g2’s website by clicking the “Get a quote” button on their product profile. Buyers must prepare for each demo by having a standard list of questions and clarifications to ask each vendor.  #### Selection of Single Sign-On (SSO) Solutions  **Choose a selection team** Single sign-on solutions impact users across the business—from employees, customers, business partners, IT teams, infosec teams, and more. The company’s software selection team should include people representative of these groups. They must start with three to five people to join the selection committee and clearly define project roles.  **Negotiation** It is important to know how many licenses are needed, as pricing often depends on the number of licenses the buyer purchases and the length of time they purchase it for. Often buyers can get discounts if they purchase large blocks of licenses for a longer duration. They must be sure to negotiate not just on price, but also implementation. Companies may be able to get free or reduced implementation services or ongoing support, as well. **Final decision** Before making a final choice, buyers should check if they can get a trial run of the product to test adoption with a small sample size of users. If the tool is well used and well received, the buyer can be confident that the selection was correct.