Security News > 2023 > March > Where SSO Falls Short in Protecting SaaS

While SSO is an important step in securing SaaS apps and their data, having just SSOs in place to secure the SaaS stack in its entirety is not enough.

SSO alone won't prevent a threat actor from accessing a SaaS app.

Here are five use cases where SSO on its own falls short.

Companies that rely solely on SSO for SaaS security can be blindsided by SaaS infiltrations into admin accounts using a username and password credentials.

SaaS Security is at its strongest when done in coordination with an SSO. An SSO solution, together with an SSPM solution, allows a holistic Identity and Access Governance, such as de-provisioning users - SSO handles access control and is an integral part of Identity and Access Management.

SaaS Security Posture Management solutions, like Adaptive Shield, also go beyond access control, with additional layers of protection in areas where SSOs are vulnerable, as well as identifying misconfigurations, recognizing connected third-party applications, identifying device hygiene issues, and data loss management.

News URL

https://thehackernews.com/2023/03/where-sso-falls-short-in-protecting-saas.html