SSO (single sign-on)
A system that lets people sign in to several applications with their company account, without a separate password for each.
With single sign-on (SSO), people sign in to an application with the account they already have at their company’s identity provider, such as Microsoft Entra ID, Google Workspace or Okta. The application doesn’t store their password: it trusts what that provider tells it.
The application and the provider talk to each other with a standard protocol. The most common are OIDC (OpenID Connect, built on OAuth 2.0) and SAML.
- When someone leaves the company, they lose access to everything at once.
- The company’s rules apply: passwords, two-step verification.
- Fewer passwords to forget or reuse.
Echo supports SSO over OIDC on the Team plan: owners set up the provider, verify the company domain with a DNS record and can require SSO for everyone. Anyone signing in with an email on that domain joins the workspace with the chosen role. More on the teams and enterprise pages.
