CISA Certified Information Systems Auditor – Question2147

Which of the following is NOT a disadvantage of Single Sign On (SSO)?

A.
Support for all major operating system environment is difficult
B. The cost associated with SSO development can be significant
C. SSO could be single point of failure and total compromise of an organization asset
D. SSO improves an administrator's ability to manage user's account and authorization to all associated system

Correct Answer: D

Explanation:

Explanation:
Single sign-on (SSO)is a Session/user authentication process that permits a user to enter one name and password in order to access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a particular session.
SSO Advantages include
Multiple passwords are no longer required
It improves an administrator’s ability to manage user’s accounts and authorization to all associated systems
It reduces administrative overhead in resetting forgotten password over multiple platforms and applications
It reduces time taken by users to logon into multiple application and platform
SSO Disadvantages include
Support for all major operating system is difficult
The cost associated with SSO development can be significant when considering the nature and extent of interface development and maintenance that may be necessary
The centralize nature of SSO presents the possibility of a single point of failure and total compromise of an organization’s information asset.
Reference:
CISA review manual 2014 Page number 332