{"id":25155,"date":"2022-09-22T00:00:00","date_gmt":"2022-09-22T00:00:00","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/que-es-sso\/"},"modified":"2026-09-16T21:30:58","modified_gmt":"2026-09-16T21:30:58","slug":"que-es-sso","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/","title":{"rendered":"\u00bfQu\u00e9 es el inicio de sesi\u00f3n \u00fanico y c\u00f3mo funciona?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><b>Single sign-on is the \u201cone ring to rule them all\u201d of internet security.<\/b> One ring to find them, one ring to bring them all, and bind the other rings through <a href=\"https:\/\/help.mailgun.com\/hc\/en-us\/articles\/1260801912270-SAML-SSO\" target=\"_tabs\" rel=\"noopener noreferrer\">Identity and Access Management (IAM)<\/a>.<\/p>\n\n<p class=\"wp-block-paragraph\">Another \u2013 less geeky \u2013 way to look at it is as a signal of scalability that attracts clients to your application. Why? SSO reduces friction from the very first step \u2013 sign up.<\/p>\n\n<p class=\"wp-block-paragraph\">Adding SSO to your software or application can be an involved process. In this post, we\u2019ll guide you through the landscape of SSO, and answer some of your burning questions. How does SSO work? What security protocols can you use? And what\u2019s the importance of SSO anyway?<\/p>\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-1114\"><p class=\"h5 m-0\" id=\"toc-title-1114\">\u00cdndice<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#what-is-sso\">What is SSO?<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">02<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#how-does-sso-work\">How does SSO work?<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">03<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#authentication-and-authorization-protocols\">Authentication and authorization protocols<\/a><a class=\"scrollme link-body-color\" href=\"#oauth-2-0\">OAuth 2.0<\/a><a class=\"scrollme link-body-color\" href=\"#openid-connect\">OpenID Connect<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">04<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#pros-and-cons-of-sso\">Pros and cons of SSO<\/a><a class=\"scrollme link-body-color\" href=\"#sso-pros\">SSO pros<\/a><a class=\"scrollme link-body-color\" href=\"#sso-cons\">SSO cons<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">05<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#top-sso-vendors\">Top SSO vendors<\/a><a class=\"scrollme link-body-color\" href=\"#okta\">Okta<\/a><a class=\"scrollme link-body-color\" href=\"#auth0\">Auth0<\/a><a class=\"scrollme link-body-color\" href=\"#onelogin\">OneLogin<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">06<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#what-types-of-companies-should-implement-sso\">What types of companies should implement SSO?<\/a><a class=\"scrollme link-body-color\" href=\"#remote-hybrid-saas-companies\">Remote\/hybrid SaaS companies<\/a><a class=\"scrollme link-body-color\" href=\"#companies-with-extensive-technology-stacks\">Companies with extensive technology stacks<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">07<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#why-mailgun-implemented-sso\">Why Mailgun implemented SSO<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">08<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#you-made-it-to-the-end\">You made it to the end<\/a><\/div><\/div><\/nav>\n<h2 class=\"wp-block-heading\">What is SSO?<\/h2>\n\n<p class=\"wp-block-paragraph\">It\u2019s a cry for help at sea. Oh wait&#8230;that\u2019s SOS.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>SSO is an authentication scheme that enables users to log into multiple applications using a single set of login credentials.<\/b> It\u2019s a great choice for companies because centralizing authentication processes not only increases security but makes it easier to monitor and maintain. With one complex password, users can log into multiple services from a single platform, eliminating password fatigue; the creation of multiple passwords that need to be securely stored or remembered.<\/p>\n\n<h2 class=\"wp-block-heading\">How does SSO work?<\/h2>\n\n<p class=\"wp-block-paragraph\">Great question.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>Single sign-on is a method of user authentication, and works by sharing and validating login credentials between service providers.<\/b> Instead of remembering passwords to all your accounts, you can link those accounts to an SSO provider. SSO implementation can be as easy as signing up for a service. With a single SSO login point, you gain secure access to all the subscriptions and applications which have been configured.<\/p>\n\n<p class=\"wp-block-paragraph\">If you think about it, SSO isn\u2019t a stand-alone protocol that you insert into your login process as much as it is an independent service with its own database and infrastructure that you integrated with. <b>Single sign-on solutions (also known as identity providers, or IdPs) build a relationship of trust with service providers<\/b> (SPs) \u2013 that is <i>you<\/i>, or other web-based applications \u2013 by keeping the integrity of messages between a service and an identity provider secure using certificates and public key cryptography.<\/p>\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" class=\"wp-image-4949\" width=\"1516\" height=\"588\" src=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/POST-MG-SSO-infographic.png\" alt=\"mage shows path of SSO authentication; login with a user\u2019s password and username on the SSO platform unlocks connected websites and apps.\" srcset=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/POST-MG-SSO-infographic.png 1516w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/POST-MG-SSO-infographic-300x116.png 300w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/POST-MG-SSO-infographic-768x298.png 768w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/POST-MG-SSO-infographic-1024x397.png 1024w\" sizes=\"(max-width: 1516px) 100vw, 1516px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">Authentication and authorization protocols<\/h2>\n\n<p class=\"wp-block-paragraph\">Identity management is great but now we need a way to get login data from point A to point B.<\/p>\n\n<p class=\"wp-block-paragraph\">IdPs need a secure way to transmit data. <b>Security Assertion Markup Language (SAML 2.0) is an authentication <\/b><a href=\"http:\/\/docs.oasis-open.org\/security\/saml\/Post2.0\/sstc-saml-tech-overview-2.0.html\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>framework for exchanging identity information between online partners<\/b><\/a>. This is an open standard, which means it\u2019s publicly available and maintained collaboratively by developers around the world.<\/p>\n\n<p class=\"wp-block-paragraph\">SAML solves a few key problems for an IdP:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Provides a single point of authentication (only sent to IdP directly).<\/li>\n\n\n\n<li>Does not require user credentials to by synchronized between directories.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><b>User credentials need to be securely stored and transferred between an IdP and a service.<\/b> SAML 2.0 is an XML-based framework that manages this data transfer. The user\u2019s browser plays a central role in this exchange of information. Here\u2019s how SAML 2.0 typically works:<\/p>\n\n<ol class=\"wp-block-list\">\n<li>The user has an IdP (e.g., Okta).<\/li>\n\n\n\n<li>The user logs into a web application, such as a CRM, from a browser.<\/li>\n\n\n\n<li>The application generates a SAML request.<\/li>\n\n\n\n<li>The SSO provider (Okta) parses the request to authenticate the user\u2019s credentials.<\/li>\n\n\n\n<li>If the user is <i>not<\/i> already logged into the SSO platform, the SSO provider prompts the user to log in using their SSO credentials, otherwise this step is skipped.<\/li>\n\n\n\n<li>Once logged in, the SSO provider generates a SAML response and sends it back to the application through the user\u2019s browser.<\/li>\n\n\n\n<li>The application verifies the response using the IdP\u2019s public certificate and logs the user in.<\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><b>The most known protocol supporting SSO is SAML 2.0, but this isn\u2019t the <\/b><i><b>only<\/b><\/i><b> option.<\/b> When reviewing options there are two big things to keep in mind. First, whether a company decides to use your application may boil down to the way you integrate with their infrastructure. Second, you\u2019re not limited to only using SAML \u2013 you can combine it with something like <a href=\"https:\/\/oauth.net\/2\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>OAuth<\/b><\/a> to target a wider market.<\/p>\n\n<h3 class=\"wp-block-heading\">OAuth 2.0<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>OAuth 2.0 is a standard protocol for identity authorization.<\/b> It\u2019s mostly used in organizations where the employees use native applications (mobile and desktop apps). Unlike SAML 2.0, it\u2019s not dependent on the browser to log the user into different applications.<\/p>\n\n<p class=\"wp-block-paragraph\">In OAuth 2.0 based SSOs, the most common workflow is a little different compared to SAML-based SSOs. In these SSOs, the client is called one additional time. Here\u2019s how it works:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>When a user tries to gain access to an app, the app initiates an authorization grant (a temporary code used for gaining an access token).<\/li>\n\n\n\n<li>The identity provider (SSO) issues an access token after receiving the authorization grant.<\/li>\n\n\n\n<li>The app receives the access token and contacts the SSO provider again.<\/li>\n\n\n\n<li>The SSO provider confirms the user\u2019s identity, and the user is allowed access to the app.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\">OpenID Connect<\/h3>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/openid.net\/connect\/\" target=\"_tabs\" rel=\"noopener noreferrer\">OpenID Connect (OIDC) is an identity<\/a> layer on top of OAuth 2.0. It operates like SAML (through authentication tokens and requests). By placing an identity layer on OAuth 2.0, it helps users cater to web-based applications as well as native applications. As opposed to SAML 2.0 which uses tokens, the information here is exchanged in JSON (JavaScript Object Notation), another format for storing data.<\/p>\n\n<h2 class=\"wp-block-heading\">Pros and cons of SSO<\/h2>\n\n<p class=\"wp-block-paragraph\">We wouldn\u2019t be us if we didn\u2019t weigh the positives and negatives of every tool in our stack, let alone the options we recommend. Here are our top pros and cons.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>SSO is a flexible identity management technology that can be configured with other authentication methods<\/b> such as <a href=\"https:\/\/www.mailgun.com\/es\/blog\/product\/protege-tu-cuenta-autenticacion-dos-fases-seguridad\/\" target=\"_tabs\" rel=\"noopener noreferrer\">two-factor authentication (2FA)<\/a>, or multi-factor authentication (MFA). A single source of authentication and user identity management, is SSO too good to be true? Check out our pros and cons below:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\nPros\u00ad of SSO\n<\/th><th>\nCons\u00ad of SSO\n<\/th><\/tr><\/thead><tbody><tr><td>\nCent\u00adralized mult\u00adi-system mana\u00adgement\n<\/td><td>\nSyst\u00adem lock\u00adout if SSO goes\u00ad down\u00ad\n<\/td><\/tr><tr><td>\nImpr\u00adoved user\u00ad expe\u00adrience and prod\u00aductivity\n<\/td><td>\nSing\u00adle poin\u00adt of fail\u00adure in case\u00ad of brea\u00adch\n<\/td><\/tr><tr><td>\nRedu\u00adced stra\u00adin on IT and Dev reso\u00adurces\n<\/td><td>\nSing\u00adle poin\u00adt of entr\u00ady in case\u00ad of brea\u00adch\n<\/td><\/tr><tr><td>\nIncr\u00adeased secu\u00adrity and comp\u00adliance\n<\/td><td><\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h3 class=\"wp-block-heading\">SSO pros<\/h3>\n\n<p class=\"wp-block-paragraph\">We love SSO and think it\u2019s a must for organizations operating online. Let\u2019s look at why.<\/p>\n\n<h4 class=\"wp-block-heading\">Centralized multi-system management<\/h4>\n\n<p class=\"wp-block-paragraph\">Access control for applications can be managed centrally by administrators. Users can be grouped in the identity provider with managed permissions. Access to certain applications can be granted to groups or individual end users.<\/p>\n\n<h4 class=\"wp-block-heading\">Improved user experience and productivity<\/h4>\n\n<p class=\"wp-block-paragraph\">The quickest way to increasing productivity is the path of least resistance. And there\u2019s nothing that takes less time than one touch access. <b>SSO makes user access as easy as opening downloaded applications on your desktop.<\/b><\/p>\n\n<h4 class=\"wp-block-heading\">Reduced strain on IT and Dev resources<\/h4>\n\n<p class=\"wp-block-paragraph\">SSO also makes life easier for IT. They receive fewer requests for password resets and recovery for multiple apps every week. SSO simplifies revoking access to all a user\u2019s accounts in one fell swoop in case an account is compromised, or an employee leaves the organization.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>IdPs reduce, or eliminate, the need for spending dev resources on constructing security management programs in-house.<\/b> With the configurable nature of SAML and SSO solutions, outsourcing these services are a practical decision with scalable benefits. <\/p>\n\n<h4 class=\"wp-block-heading\">Increased security and compliance<\/h4>\n\n<p class=\"wp-block-paragraph\"><b>SSO is a security focused solution that is configurable and scalable.<\/b> While it is not currently <i>explicitly<\/i> required in regulations like <a href=\"https:\/\/www.mailgun.com\/es\/blog\/email\/llegada-rgpd\/\" target=\"_tabs\" rel=\"noopener noreferrer\">GDPR<\/a> or CPAA, it does make implementing the security standards outlined by those regulations much easier. SSO is built to be adaptable, allowing you to incorporate other security methods such as 2FA as required \u2013 and make updates quickly across your company as regulations evolve.<\/p>\n\n<h3 class=\"wp-block-heading\">SSO cons<\/h3>\n\n<p class=\"wp-block-paragraph\">And what about the cons? Ironically, there are a few security things to keep in mind if you\u2019re considering implementing single sign-on.<\/p>\n\n<h4 class=\"wp-block-heading\">Restricted access in an outage<\/h4>\n\n<p class=\"wp-block-paragraph\">One of the biggest disadvantages of SSO is that when you log out of one app, you log out of all. Also, if your SSO service is down, you\u2019re locked out of your services, even if all your apps are up and running.<\/p>\n\n<h4 class=\"wp-block-heading\">Single point of failure<\/h4>\n\n<p class=\"wp-block-paragraph\">By being the primary source of identity verification in your organization, SSO also becomes a single point of failure. If attackers get to your SSO solutions provider, all your company data will be at risk.<\/p>\n\n<h4 class=\"wp-block-heading\">Single point of entry<\/h4>\n\n<p class=\"wp-block-paragraph\">A single point of failure also means a single point of entry for security risks. If one employee\u2019s SSO credentials are compromised, an external threat could very quickly gain access to your entire stack. But, let\u2019s be honest \u2013, that truth is valid even if SSO is not a part of your solution. A compromised password is a compromised password. <\/p>\n\n<p class=\"wp-block-paragraph\"><b>The latest authentication techniques such as <\/b><a href=\"https:\/\/webauthn.guide\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>WebAuthN<\/b><\/a><b>, <\/b><a href=\"https:\/\/www.yubico.com\/why-yubico\/how-the-yubikey-works\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>Yubikeys<\/b><\/a><b>, biometrics, etc. are easy to integrate into SSO<\/b>, and these advanced authentication techniques may not be supported by smaller service providers.<\/p>\n\n<h2 class=\"wp-block-heading\">Top SSO vendors<\/h2>\n\n<p class=\"wp-block-paragraph\">Even though SSO protocols are relatively stable and consistent, there are many SSO providers out there offering slight variations in features, cost, and support. Let\u2019s take a look at a few industry leaders:<\/p>\n\n<h3 class=\"wp-block-heading\">Okta<\/h3>\n\n<p class=\"wp-block-paragraph\">Okta supports secure password management, authentication, and authorization for your apps and services. It is customizable and scalable for evolving security programs, and offers an additional layer of security with its <a href=\"https:\/\/help.okta.com\/en-us\/Content\/Topics\/Security\/threat-insight\/ti-index.htm?cshid=ext_threatinsight\" target=\"_tabs\" rel=\"noopener noreferrer\">ThreatInsights<\/a> feature that detects malicious IPs across Oktas own customer base.<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Okta supports <a href=\"https:\/\/www.okta.com\/products\/single-sign-on\/#:~:text=a%20network%20of-,7%2C000%2B%20pre-built,-integrations%20that%20help\" target=\"_tabs\" rel=\"noopener noreferrer\">7,000+<\/a> on-premise and cloud apps.<\/li>\n\n\n\n<li>Some of Okta\u2019s customers reported a <a href=\"https:\/\/www.okta.com\/blog\/tag\/roi\/\" target=\"_tabs\" rel=\"noopener noreferrer\">600% ROI<\/a>.<\/li>\n\n\n\n<li>Okta supports 25 languages around the globe.<\/li>\n\n\n\n<li>You can start using Okta\u2019s SSO for <a href=\"https:\/\/www.okta.com\/pricing\/\" target=\"_tabs\" rel=\"noopener noreferrer\">$2 per user per month<\/a>.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\">Auth0<\/h3>\n\n<p class=\"wp-block-paragraph\">Auth0 provides authorization and authentication but, historically, is a more developer- focused IdP and may be more flexible and configurable for SMB companies or companies in their startup phase.<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Auth0 supports <a href=\"https:\/\/auth0.com\/learn\/how-to-implement-single-sign-on\/#:~:text=With%20Auth0%2C%20this%20is%20just,more%20than%2015%20cloud%20applications.\" target=\"_tabs\" rel=\"noopener noreferrer\">15 pre-integrated cloud-based apps<\/a>.<\/li>\n\n\n\n<li>Auth0 boasts of a <a href=\"https:\/\/auth0.com\/forrester-total-economic-impact\" target=\"_tabs\" rel=\"noopener noreferrer\">548% ROI<\/a> in less than six months.<\/li>\n\n\n\n<li>They support <a href=\"https:\/\/auth0.com\/docs\/brand-and-customize\/i18n\/universal-login-internationalization\" target=\"_tabs\" rel=\"noopener noreferrer\">39 languages<\/a>.<\/li>\n\n\n\n<li>They have a free plan that supports up to 7,000 users.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\">OneLogin<\/h3>\n\n<p class=\"wp-block-paragraph\">OneLogin is comparable to Okta and features easy password generation, a transparent subscription plan, extensive knowledge base and customer onboarding, and expanded global support services.<\/p>\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.onelogin.com\/product\/sso\" target=\"_tabs\" rel=\"noopener noreferrer\">OneLogin<\/a> is a global SSO provider that offers support for 21 languages around the globe.<\/li>\n\n\n\n<li>They support <a href=\"https:\/\/www.onelogin.com\/product\/app-catalog#:~:text=6%2C000%20pre-integrated%20applications\" target=\"_tabs\" rel=\"noopener noreferrer\">6,000 pre-integrated apps<\/a>.<\/li>\n\n\n\n<li>They claim you can get a <a href=\"https:\/\/www.onelogin.com\/resource-center\/all-resources\/forrester-tei-study-for-onelogin-idaas-sso-solution#:~:text=yours%20can%20achieve-,482%25%20ROI,-in%20only%202\" target=\"_tabs\" rel=\"noopener noreferrer\">482% ROI<\/a> by using their identity services.<\/li>\n\n\n\n<li>OneLogin\u2019s SSO also costs $2 per user per month.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">If you\u2019re in the market for an SSO provider, check out the user reviews for all three as well as <a href=\"https:\/\/azure.microsoft.com\/en-us\/services\/active-directory\/sso\/\" target=\"_tabs\" rel=\"noopener noreferrer\">Azure AD SSO<\/a>, <a href=\"https:\/\/www.pingidentity.com\/en\/platform\/single-sign-on.html\" target=\"_tabs\" rel=\"noopener noreferrer\">Ping Identity<\/a>, and <a href=\"https:\/\/aws.amazon.com\/single-sign-on\/\" target=\"_tabs\" rel=\"noopener noreferrer\">AWS SSO<\/a>.<\/p>\n\n<h2 class=\"wp-block-heading\">What types of companies should implement SSO?<\/h2>\n\n<p class=\"wp-block-paragraph\">SSO for all.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>IdPs solve problems for a variety of use cases<\/b> \u2013 from individuals wanting to manage their personal credentials to companies at all scales. But is particularly useful for these types of organizations:<\/p>\n\n<h3 class=\"wp-block-heading\">Remote\/hybrid SaaS companies<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>Companies that have a large portion of their employees working remotely<\/b> can reduce risks and improve cybersecurity by using SSO in addition to two-factor or multi-factor authentication. Employees logging in from home will have to authenticate their credentials to gain access to the company\u2019s technology stack. Multi-factor authentication will ensure that employee credentials are not misused, and the IT help desk will have the ability to revoke access in case an employee\u2019s credentials are compromised.<\/p>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> Bad actors are always trying to find ways around simple multi-factor authentication with phishing attacks. Hardware tokens and biometric security measures, like YubiKeys leveraging the FIDO2 protocol, help mitigate attacks. Check out how our team <a href='https:\/\/www.mailgun.com\/es\/blog\/product\/ataque-phishing-detenido\/'>stopped a large-scale phishing attack<\/a>.<\/div>\r\n    <\/div>\r\n\n<h3 class=\"wp-block-heading\">Companies with extensive technology stacks<\/h3>\n\n<p class=\"wp-block-paragraph\">Companies that work with a lot of apps and tools can provide a seamless experience for accessing these apps through SSO. These companies can also eliminate the chances of employees being locked out of different apps due to lost credentials.<\/p>\n\n<h2 class=\"wp-block-heading\">Why Mailgun implemented SSO<\/h2>\n\n<p class=\"wp-block-paragraph\">We\u2019re not just here to feed you a 2000 word sermon on why you should consider SSO.<\/p>\n\n<p class=\"wp-block-paragraph\">We do as we preach. Mailgun uses SSO internally to manage our own teams, services, and applications. It\u2019s one of the many ways we keep our data and systems protected.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>SSO means ease-of-integration for companies to manage their user identities<\/b> with their preferred IdP. So, when <i>our<\/i> user community requested that we implemented SAML single sign-on, it really was an obvious choice.<\/p>\n\n<p class=\"wp-block-paragraph\">Integrating with your IdP to authenticate users via SSO is simple. To get started, you\u2019ll just need to configure SAML within your Mailgun account for a verified domain and follow the instructions in our detailed <a href=\"https:\/\/help.mailgun.com\/hc\/en-us\/articles\/1260801912270-SAML-SSO\" target=\"_tabs\" rel=\"noopener noreferrer\">SAML SSO documentation<\/a>.<\/p>\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" class=\"wp-image-4950\" width=\"2560\" height=\"1463\" src=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-scaled.png\" alt=\"Screen_Shot_2022-09-16_at_9\" srcset=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-scaled.png 2560w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-300x171.png 300w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-768x439.png 768w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-1024x585.png 1024w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-1536x878.png 1536w, https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/Screen_Shot_2022-09-16_at_9.13.42_AM-2048x1170.png 2048w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">You made it to the end<\/h2>\n\n<p class=\"wp-block-paragraph\">This was a long one but we hope it helped.<\/p>\n\n<p class=\"wp-block-paragraph\">At Mailgun, we\u2019re always driven by our desire to make our product as usable and accessible as possible, and SSO plays a big role in achieving this. With remote work and the growth of cloud-based solutions, \u201cone ring\u201d to rule your access management is an easy way to integrate and scale complex security. Just make sure that your one ring supports biometrics.<\/p>\n\n<p class=\"wp-block-paragraph\">We\u2019re nerds when it comes to security. Don\u2019t believe us? Check out our ebook for the deep dive you didn\u2019t know you were missing.<\/p>\n\r\n    <aside data-content-type=\"longform\"  class=\"banner-block longform-spacings rounded-lg shadow-lg px-5 py-6 px-md-6 py-md-7 p-lg-7 bg-light\" data-theme=\"dark\" aria-labelledby=\"banner-block-block_843b1d8b9fcab3616e2fd0d412632b07\">\r\n                    <p class=\"text-uppercase section-caption text-body-color\">\r\n                Learn about email security and compliance            <\/p>\r\n                            <p class=\"h4 text-accent fw-bold\" id=\"banner-block-block_843b1d8b9fcab3616e2fd0d412632b07\">\r\n                Email security and compliance            <\/p>\r\n                            <div class=\"mb-0 text-body-color\">\r\n                                    <div class=\"content-body mb-0 text-body-color\">Email security isn&#x27;t easy. But you need to protect your business, brand, employees, and subscribers. Find out about the benefits of continually improving email security and compliance from our industry experts. It&#x27;s yours to explore. No form filling required.<\/div>\r\n                            <\/div>\r\n        \r\n        <div class=\"text-start mt-5\"><a href=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/10\/GU-MG-Security-and-Compliance.pdf\"  class=\"btn btn-secondary\" >Get the guide<\/a><\/div>\r\n    <\/aside>\r\n\r\n","protected":false},"excerpt":{"rendered":"<p>El inicio de sesi\u00f3n \u00fanico (SSO) es una soluci\u00f3n integral para un problema de acceso m\u00faltiple. Como es l\u00f3gico, ocurren muchas cosas entre bastidores. Desde proveedores de identidad hasta protocolos de autorizaci\u00f3n, cubrimos todo lo que implican las soluciones de SSO y lo que pueden hacer por ti.<\/p>\n","protected":false},"author":21,"featured_media":4843,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[23],"class_list":["post-25155","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-it-and-engineering"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T21:30:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/\",\"name\":\"Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"datePublished\":\"2022-09-22T00:00:00+00:00\",\"dateModified\":\"2026-09-16T21:30:58+00:00\",\"description\":\"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/it-and-engineering\\\/que-es-sso\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"\u00bfQu\u00e9 es el inicio de sesi\u00f3n \u00fanico y c\u00f3mo funciona?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Potentes API de email transaccional que te permiten enviar, recibir y hacer seguimiento de emails, creadas pensando en los desarrolladores. \u00a1Descubre m\u00e1s!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun","description":"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/","og_locale":"es_ES","og_type":"article","og_title":"Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun","og_description":"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.","og_url":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","article_modified_time":"2026-09-16T21:30:58+00:00","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"10 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/","url":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/","name":"Inicio de sesi\u00f3n \u00fanico: c\u00f3mo funciona y por qu\u00e9 lo necesitas - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","datePublished":"2022-09-22T00:00:00+00:00","dateModified":"2026-09-16T21:30:58+00:00","description":"El inicio de sesi\u00f3n \u00fanico es una soluci\u00f3n segura y escalable para la gesti\u00f3n de accesos. Descubre qu\u00e9 es el SSO, c\u00f3mo funciona y por qu\u00e9 te interesar\u00eda implementarlo.","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/que-es-sso\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/es\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/es\/blog\/"},{"@type":"ListItem","position":3,"name":"\u00bfQu\u00e9 es el inicio de sesi\u00f3n \u00fanico y c\u00f3mo funciona?"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/es\/#website","url":"https:\/\/www.mailgun.com\/es\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Potentes API de email transaccional que te permiten enviar, recibir y hacer seguimiento de emails, creadas pensando en los desarrolladores. \u00a1Descubre m\u00e1s!","publisher":{"@id":"https:\/\/www.mailgun.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/es\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.mailgun.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/es\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog\/25155","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/users\/21"}],"version-history":[{"count":2,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog\/25155\/revisions"}],"predecessor-version":[{"id":25256,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog\/25155\/revisions\/25256"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/media\/4843"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/media?parent=25155"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog_category?post=25155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}