Enterprise Single Sign-On: The Missing Link in Password Management
Every information security executive understands the problems of password fatigue and password inflation on end users and network administrators. The irony is that so few security managers choose to implement the most effective antidote: Enterprise Single Sign-On (ESSO). Most organizations have adopted other best practices for password management, from password composition rules and password update policies to authentication of users who request a password reset. Although procedures such as these can go a long way toward thwarting hackers by strengthening and protecting the passwords themselves, they do not combat the broader problem of password overload, that is, the user frustration, productivity losses, security risks, and administrative overhead stemming from the need for users to remember a different password for the applications required to perform their jobs.