Single Sign-On

Data & Tracking

Also: SSO

What it doesOne login for many tools
Trade-offConvenience versus single point of failure
Common providersGoogle Workspace, Microsoft Entra, Okta
Watch forOffboarding gaps across tools

Quick definition

Single Sign-On (SSO) is a login method that lets someone access multiple separate tools and platforms using one set of credentials. Instead of a different password for your CRM, analytics platform and ad accounts, SSO authenticates once and carries that trust across connected systems.

What it actually means

Single Sign-On works like a building pass instead of a separate key for every door. Sign in once with your identity provider and every connected room, your CRM, your analytics platform, your ad accounts, opens without asking again.

For marketing teams this matters more than it sounds. Martech stacks sprawl fast. A mid-size team might touch a CMS, an email marketing platform, a CRM, an analytics suite and a handful of paid media dashboards in one day. Without SSO, that's five passwords, five points of failure, and a slow trickle of ex-staff who still technically have access somewhere.

SSO centralises identity instead. IT or ops manages one login system. When someone leaves, revoking that one login should cut off access everywhere connected. That's the promise. In practice, plenty of tools sit outside the SSO umbrella because nobody bothered connecting them, which quietly recreates the exact problem SSO was meant to solve.

The security trade is real. One compromised login now opens more doors than before. Multi-factor authentication (MFA) is not optional alongside SSO, it's the point.

SSO doesn't remove risk. It concentrates it into one login worth guarding properly.

How it shows up

SSO shows up as a 'Sign in with Google' or 'Sign in with Microsoft' button on your martech platforms instead of a separate username and password form. It shows up in your identity provider's admin panel as a list of connected apps. It also shows up, painfully, during an audit when someone discovers a tool that was never connected and still has three former employees with standing access.

The Australian context

Australian businesses handling customer data under the Privacy Act have an added reason to take SSO seriously. Centralised identity makes it far easier to demonstrate who had access to what data and when, which matters if the Office of the Australian Information Commissioner (OAIC) ever comes asking after a breach. Loose, tool-by-tool logins make that kind of audit trail almost impossible to reconstruct.

Where people get this wrong

Connecting the big platforms but leaving smaller tools outside SSO.A handful of unconnected tools recreate the scattered-password problem SSO was meant to solve, and they're usually the ones nobody audits.
Treating SSO as a substitute for multi-factor authentication.SSO concentrates access into one login. Without MFA on that login, a single phished password now opens every connected tool instead of just one.
Assuming offboarding is automatic.Revoking SSO access doesn't always cut off tools that cache old sessions or use separate API keys. Offboarding needs a checklist, not just a login removal.

Related terms

Common questions

Is Single Sign-On the same as a password manager?

No. A password manager stores separate passwords for each tool and fills them in for you. SSO removes the separate passwords entirely by authenticating once through a shared identity provider. They solve a similar frustration in different ways.

Does SSO make a business more or less secure?

Both, depending on execution. It reduces password reuse and simplifies offboarding, which improves security. But it also concentrates access into one login, so that login becomes a high-value target. Multi-factor authentication is what keeps the trade-off in your favour.

What are common SSO providers?

Google Workspace and Microsoft Entra ID cover most small and mid-size businesses since they're often already in use for email. Larger organisations often add a dedicated identity provider like Okta or OneLogin to manage more complex tool stacks.

Why would a marketing team care about SSO?

Marketing teams typically run the widest tool stack in a business, spanning CRM, analytics, email, ads and content platforms. SSO reduces the admin overhead of managing access across all of them and closes gaps left by staff turnover or agency handovers.

Debrief

Get the next one

No spam. No fluff. Just the next article, straight to your inbox.

Keep exploring

About New Rebellion

New Rebellion is a marketing intelligence consultancy. We build tools, score Australian businesses on how their marketing actually performs, and publish Debrief every day. This dictionary is part of how we work in the open.

How we think →