Single sign-on shifts identity risk from individual accounts to the identity provider, creating a single point of failure that requires stricter access controls than distributed systems.
Single sign-on shifts trust from local password checks to signed cryptographic tokens, creating a single point of failure that centralizes both access and attack surfaces.
