Single sign-on (SSO)

Single sign-on (SSO) lets a user sign in to several services with one authentication. Access is centralized in a company directory, and revoking it takes effect everywhere at once.

In Ubidesk, SSO is available on the Business plan, through an identity provider using SAML or OIDC. MFA stays mandatory even when SSO is enabled.

In practice

SSO simplifies offboarding: removing the account from the directory cuts console access at the same time.