Single Sign-On works by a standard known as SAML (Security Assertion Markup Language). This is what allows a network to communicate with a web-based app (such as SmartSurvey), so it can verify a user’s identity without the user needing to enter a username and password.

Once a user is signed in to their main account, they can visit any web app that’s been set up to accept them. The app will request an encrypted token to verify identity and the device sends an encrypted message confirming identity. From the users point of view, one click and they are logged in, simple.

1. A user (“John Smith”) gets in to work in the morning and logs on to his work PC
2. Later in the day, John needs to log in to the SmartSurvey
3. He clicks an intranet link set to a unique access page
4. The website will ask “is this person a verified user for this account?”
5. The work PC will respond “Yes, this is John Smith”
6. John is logged in and can start using SmartSurvey

Yes it’s highly secure because it’s based on encrypted information. An additional benefit is that users don’t need to memorise numerous passwords to access the tools they use. This reduces the risk of users storing passwords on paper or in local files, with all the associated security risks that poses. Single Sign-On is also supported through Active Directory, which uses SAML. This means that users who access their workstations through a domain login, need only keep their domain password secure, rather than keeping multiple passwords for the software they use day to day.

‍

Single Sign-On means users don’t have to remember different account details for each app or tool. It means organisations can improve productivity, increase security, and encourage better password habits.
‍

Single Sign-On for SmartSurvey is available as an optional extra for our Enterprise plan