Design Single Sign-On · System Design Interview

Design Single Sign-OnDesign the identity system a company signs into once, which every internal and third-party application it uses then trusts.What it has to do

Someone signs in once and reaches every application they are entitled to without signing in again

An application receives who the person is, and what groups they are in, in a form it can verify by itself

Removing someone from the directory cuts off every application

Scale

People in the directory: 250,000

Applications connected: 4,000

Sign-ins per day: 3 million

Out of scope

The directory’s admin interface

Each application’s own permission model

Device management

Password reset flows

Practise this challengeAll system design challenges

LetsDiscuss

Loading your session…