Which of the following is the GREATEST risk associated with the use of single sign-on (SSO)?

The correct answer is B. A compromise of one user's credentials grants access to all applications for which the user has. SSO's core security risk is that it creates a single point of compromise: if an attacker steals or guesses one user's credentials, they immediately gain access to every application integrated with the SSO system. This dramatically amplifies the blast radius of a credential theft

Submitted by hans_de· Apr 18, 2026Information Security Risk Management

Question

Options

ASeparation of duties is more difficult to enforce when using SSO across the organization.
BA compromise of one user's credentials grants access to all applications for which the user has
CA user who loses a password can lose access to all organizational systems and resources.
DIntegration of SSO with the rest of the infrastructure is complex and difficult to manage.

How the community answered

(22 responses)

A
9% (2)
B
68% (15)
C
5% (1)
D
18% (4)

Explanation

SSO's core security risk is that it creates a single point of compromise: if an attacker steals or guesses one user's credentials, they immediately gain access to every application integrated with the SSO system. This dramatically amplifies the blast radius of a credential theft event. Separation of duties enforcement (A) is a valid challenge but manageable through authorization controls within applications. Password loss (C) causing lockout is an availability concern, not a security risk, and is addressed through account recovery processes. Integration complexity (D) is an operational challenge, not a direct security risk to data confidentiality or integrity.

Topics

#Single Sign-On (SSO)#Identity and Access Management (IAM)#Credential Compromise#Risk Identification

Community Discussion

No community discussion yet for this question.

Full CISM Practice