MFA / SSO
MFA (Multi-Factor Authentication) is a security mechanism that requires at least two proofs of identity to authenticate a user, picked from: something they know (a password), something they have (a phone, a YubiKey) or…
MFA (Multi-Factor Authentication) is a security mechanism that requires at least two proofs of identity to authenticate a user, picked from: something they know (a password), something they have (a phone, a YubiKey) or something they are (biometrics).
SSO (Single Sign-On) lets a user sign in once at an identity provider (Google Workspace, Microsoft Entra ID, Okta) and then access all federated applications without re-entering a password, using protocols such as SAML 2.0, OpenID Connect or OAuth 2.
MFA and SSO combine: SSO simplifies the experience, MFA hardens the central authentication factor. Passkeys (FIDO2/WebAuthn) are replacing passwords + OTP with phishing-resistant, password-free authentication.
