🛡️ RISK BADGE: 🔴 CRITICAL (>20 Users)
Executive Summary: What is it?
Single Sign-On (SSO) allows your employees to log in using their existing company credentials (Google Workspace, Microsoft Entra ID/Azure, Okta) instead of creating a new username and password. It ties access to your central employee directory.
CFO / Business Impact: What does it cost/risk?
The "Offboarding" Risk. Without SSO, when an employee leaves the company, you must manually remember to disable their account in this specific tool. If you forget, they retain access to company data. Compliance: SOC2 and ISO 27001 audits generally mandate SSO for any system holding sensitive data.
Technical Reality: How does it work?
Often hidden behind the "Enterprise" paywall in Open Core models. Look for keywords like SAML 2.0 or OIDC.
💡 Executive FAQ
- Question: What is the "SSO Tax"?
- Answer: Many SaaS vendors treat SSO as an enterprise-only feature, charging 2x-10x the base price just to enable SAML. In the Open Source world, we prioritize vendors who include SSO in their core or community editions.