---
title: "What are the benefits of using Single Sign On (SSO) in Spirion Sensitive Data Platform?"
url: "https://dm0bkdes5q7a2ls.productfruits.help/en/article/what-are-the-benefits-of-using-single-sign-on-sso-in-spirion-sensitive-data-platform"
language: "en"
last_updated: "2026-09-18T22:23:56.235Z"
---

# What are the benefits of using Single Sign On (SSO) in Spirion Sensitive Data Platform?

Implementing Single Sign-On (SSO) in Spirion Sensitive Data Platform (SDP) provides significant security, administrative, compliance, and user-experience benefits across an organization.

By delegating authentication to a centralized enterprise Identity Provider (IdP) via industry standards such as **SAML 2.0** or **OpenID Connect (OIDC)** (for example Microsoft Entra ID/Azure AD, Okta, PingIdentity, OneLogin), organizations gain the following advantages:

## 1\. Enhanced Security & Credential Protection

-   **Elimination of Password Fatigue & Weak Passwords:** Users no longer need to create, remember, or rotate separate local passwords for the Spirion Sensitive Data Platform console, eliminating risky password reuse across tools.
-   **Enforcement of Enterprise MFA & Conditional Access:** Because authentication occurs at the enterprise IdP, all corporate **Multi-Factor Authentication (MFA)**, device compliance checks, geographic IP fencing, and conditional access policies apply automatically to Spirion Sensitive Data Platform access.
-   **No Credential Storage in the Application:** Passwords never touch or reside within the Spirion SaaS application database; authentication relies on signed, encrypted cryptographic tokens/assertions (for example, SAML assertions or JWTs).

## 2\. Centralized User Lifecycle & Access Governance

-   **Instant Offboarding & Deprovisioning:** When an employee, contractor, or security admin leaves the organization or changes roles, disabling their account in the centralized IdP immediately cuts off access to Spirion Sensitive Data Platform, preventing lingering orphaned accounts and unauthorized data access.
-   **Just-In-Time (JIT) Provisioning:** Many SSO integrations allow new authorized users to have their Spirion Sensitive Data Platform user profile automatically created upon their first successful IdP sign-in, reducing manual onboarding steps.
-   **Automated Role & Group Mapping:** Map directory groups in Active Directory/Okta directly to Spirion **Role-Based Access Control (RBAC)** roles (for example, *Super Admin*, *Scan Operator*, *Auditor*, *Read-Only Viewer*). When a user changes teams in HR systems, their permissions in Spirion Sensitive Data Platform update accordingly.

## 3\. Compliance, Auditability, and Governance

-   **Centralized Audit Trails:** All authentication events, successful logins, failed attempts, and MFA challenges are logged within the enterprise IdP SIEM integration (for example, Splunk, Microsoft Sentinel) as well as within Spirion audit logs, satisfying compliance mandates like **SOC 2**, **ISO 27001**, **HIPAA**, **PCI-DSS**, and **GDPR**.
-   **Segregation of Duties:** Ensures that access to sensitive scan findings, compliance reports, and data classification results is strictly tied to validated organizational identities.

## 4\. Improved Operational Efficiency & User Experience

-   **Frictionless Access for Security & IT Teams:** Analysts and administrators can seamlessly navigate into the SDP Console via corporate application portals without repeated login prompts.
-   **Reduced IT Helpdesk Costs:** Drastically reduces password reset tickets, account lockout requests, and administrative overhead associated with managing standalone application credentials.