Single Sign-On (SSO)
A single sign-on (SSO) system allows the user to authenticate once to a local device and be authorized to access compatible application servers without having to enter credentials again.
- one way to implement SSO is Kerberos framework
- risk that breached credentials can be used to gain access to a wide array of resources
Active Directory Federation Services (ADFS)
- supports integrating Active Directory SSO with other services