> For the complete documentation index, see [llms.txt](https://karansingh.gitbook.io/aws-saa-c02/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://karansingh.gitbook.io/aws-saa-c02/security-and-management/single-sign-on-sso.md).

# Single Sign On (SSO)

* Single Sign-On is a **cloud-based single sign-on (SSO) service** that makes it easy to **centrally manage SSO access** to all of your AWS accounts and cloud applications.<br>
* Specifically, it helps you **manage SSO access and user permissions across all your AWS accounts in Organizations**.<br>
* SSO also **helps you manage access and permissions to commonly used third-party software as a service (SaaS) applications**, SSO-integrated applications as well as custom applications that **support Security Assertion Markup Language (SAML) 2.0**.<br>
* SSO is **integrated with Microsoft AD through the AWS Directory Service**.<br>
* This is a **much better option than `AssumeRoleWithSAML`** because it **can scale** and it **doesn't require you to set up an 3rd party identity provider (IdP)**.