Question

An IS auditor is reviewing a newly implemented single sign-on (SSO) solution that allows employees to authenticate once and access multiple critical applications. Which of the following represents the GREATEST security concern the auditor should highlight?

Accepted Answer

A compromise of a single user's credentials could grant an attacker access to all connected applications

Answer

Users must remember only one set of credentials, reducing password reset requests to the help desk

Answer

SSO increases the number of authentication events that must be logged and monitored

Answer

Application owners lose the ability to define their own password complexity rules