An organization uses multiple cloud-based applications and software services across different departments. Employees currently have to maintain and enter distinct usernames and passwords for each application, resulting in frequent password fatigue, sign-in friction, and increased support requests. Which authentication method should the IT administrator configure in Microsoft Entra ID (Azure AD) to enable users to access all authorized applications using a single set of credentials?

Single sign-on (SSO): ### What Single Sign-On (SSO) Is **Single sign-on (SSO)** is an identity and access management method that enables users to authenticate once with a single set of login credentials (such as a corporate username and password) and gain access to multiple connected applications and services without needing to re-authenticate separately for each one. ### How It Meets the Organization's Requirements - **Unified credential access**: With SSO configured in **Microsoft Entra ID** (formerly Azure Active Directory), users log in once and can open any authorized enterprise cloud or on-premises application without re-entering credentials. - **Elimination of credential sprawl**: Users no longer need to create or remember different passwords for individual applications, eliminating password fatigue and reducing support tickets for credential resets. - **Centralized identity management**: Administrators can manage user permissions and access from a single identity provider while providing seamless application access via portals such as **Microsoft My Apps**. ### Key Advantages and Capabilities - **Multiple integration protocols**: Supports modern federation protocols such as **SAML 2.0**, **OpenID Connect**, and **WS-Federation**, as well as password-based vaulting for legacy web apps. - **Improved productivity**: Minimizes time spent repeatedly logging in throughout the workday. - **Enhanced security controls**: Enables centralized enforcement of **Conditional Access** policies and session controls across all connected applications. - **Simplified offboarding**: Revoking or disabling an employee's central Entra ID account instantly cuts off their access to all linked downstream applications. ### Why This Is Optimal SSO is specifically designed to solve the problem of multiple independent logins by delegating authentication to a central identity provider, making it the most direct and effective solution for the organization's requirements.