What Is Single Sign-on (SSO)? How It Works

[@RobinHistoryMystery]

Even after landing the senior-level job, I still comeback time-to-time to refresh my memories Thank you

[@shakedko]

I love the simplification of your tutorials. Great content

[@mr.nobody8538]

this channel is underrated, keep the good work.

[@desmondberry528]

I agree

[@goldfishbrainjohn2462]

This channel is not underated. it started from 2022/6/9 and it has reached 222 k subscriptions. Growing very fast!

[@phucosg]

@@goldfishbrainjohn2462 tbh this is the fastest growing tech channel I ever seen

[@derrickmehaffy]

Something I would love to see about SSO is diving deeper into the SSO Authorization side as well. These examples are fantastic for the SSO authentication area but not diving into authorization to not just determine who the user is but also what they have access to. I love your videos and strongly recommend them to my coworkers to help explain complex topics very easily but I also struggle to properly explain SSO Authentication vs SSO Authorization and the importance of both.

[@gabrielfono844]

I got your books few months ago when I was trying to learn system design without even knowing you were on youtube providing amazing contents. thanks a lot. I really love your content

[@amwinkify]

You really are doing excellent videos. Way to translate difficult system design for the rest of us. Good job translating. THANK YOU!

[@ReflectionOcean]

Key concepts: 1. Service Provider and Identify Provider 2. Federated Identity protocols: SAML (XML) vs OpenID (JWT)

[@LM-fj2ug]

Thanks for the video! As a product manager, your videos are super useful and easy to understand. Your videos by far are the most well created and easy to understand for explaining complex concepts. I am currently trying to wrap my head around to understand how my developers implemented SSO in my company using OAuth2 and OIDC because I need to explain to people who have even less technical knowledge than I am. You'd think your own developers can explain what they have implemented, but having ability to explain complex concept to non-developers is not for everyone. Would be great if you can also provide a similar easy to understand video for how SSO is implemented with OAuth2 and OIDC. 🙏🙏🙏

[@jonno9891]

Best explanation of SAML traffic flow I've seen. Other videos make it seem as though the IDP is making outbound connection to SP to deliver the assertion!

[@RyantheCanuckpirate]

I could listen to this guy all day. Doesn't even have to be tech stuff. He could open a cooking channel for all I care

[@reloaderv3282]

Super simple yet very complete explanation. 10/10

[@rarylson]

Hi folks from Byte Byte Go. Your videos are great! But specifically for this one, I think you should explain how SAR, which is actually a XML document, is passed from SP to browser then to IdP (the same for the SAML assertion). I do not have deep knowledge in SAML, but I suspect the XLM document is compressed (deflate), base64 encoded, and passed as a query string into a HTTP 302 Redirect response. I don't know if I'm correct. But I think this explanation should be on the video. It's a very basic detail of implementation that everyone interested on the basic technical aspects of SAML (me included) should learn/be aware.

[@crowdbyte159]

First, I give it a like then I watch because I believe the content

[@F2H16]

SSO is an authentication scheme. SSO is built on a concept called federated identity. It enables sharing of identity information across trusted but independent systems. Key concepts: 1. Service Provider and Identify Provider 2. Federated Identity protocols: SAML (XML) vs OpenID (JWT)

[@hanygarass225]

Simple, easy and direct to the point explanation of SSO. Thank you so much for the info and being so precise!

[@shanmathew152]

Great explanation, easily understandable visual diagrams, all in under 5 mins..Thank you so much.

[@alamelu85]

Thanks for choosing SAML, for explanation.

[@Rola-c3g]

Thank you. You are the best one who is explaining the SSO.

[@John83118]

This is a powerhouse of information. A book I read on this was also a wealth of knowledge. "The Art of Meaningful Relationships in the 21st Century" by Leo Flint

[@0x404Unknown]

This video is fantastic. Definitely the best one I have seen for this topic that goes over SAML and OIDC topics!

[@grazingkelpie]

For some reason these videos make me feel more relaxed

[@WitchyHxrynOfficial]

abstraction and simplification of a huge implementation, that's why

[@FlareGunDebate]

You deserve more subs. Keep up the great work.

[@quentin7343]

What a clear, straight-forward explanation. Thanks man.

[@carlellis9647]

I don't ever think I've ever received so much valuable information, in such a short amount of time. That was a terrific video, keep up the good work! :)

[@mercenary-coder]

Amazing and on point explanation provided enough to keep in mind and use when a real scenario is encountered. Thanks a ton sir. hare krishna

[@Wellness-100]

You made it so easy for me to understand !! Thank you so much! Im now a subscriber and soon to be an active viewer. Thanks again for a fantastic breakdown!

[@Mythili_2140]

Very good video, thanks; special mention to the clarity of thought and presentation; this made the concept easier to grasp.

[@kickass1179]

it is amazing how quickly this channel have grown. Great content!

[@sumitsapient]

I'm sorry if my question sounds dumb. Where does OAuth 2.0 and LDAP fit in this picture? I saw common protocols at 0:48 are SAML and OpenID Connect.

[@sufailkalathil169]

Thank you for the video. It's super clear. Loved this style of presentation

[@neerajvenugopal6040]

Great video. SSO explained so easily with SAML / openid flow.

[@caesar5555]

Finally! Great clear explanation! Thank you!

[@ARTEMFOREVER]

good video and explanation 👍 hello from Russia, yaroslavl❤😎

[@BryanLong-fz7zf]

Spectacular video that simplifies a complex process in a short, digestible clip without any fluff. I loved the animations throughout the video. What app or tool are you using for the animations?

[@resetengineering]

Crisp and full of info. Love the bytes for a high level understanding

[@PhuongLe-jd5bq]

This is good video for learning single sign-on. But this video will good than more if having code example. Thank you.

[@benjaminretser9285]

Loved this style of video where you explain popular standards, more of this in the future i hope! I'm also a big fan of ur system desgin videos and was wondering if you would do a high frequency chat system like twitch chat or anything that involves combining the C10K problem with a chat channel. Maybe its just as simple as throwing together a redis microservice but im dying to know!

[@daredevil1189]

Very good one. simple and without fluffs

[@ShaneGarvey-d1f]

Great video. The visuals are very well done

[@jamesclark007]

Great content! Excellent explanation of a complicated problem in a simple way.

[@abedmalak_]

How is your editing skills so so good:!?!??

[@smarttrupti2007]

Thank you. Such a nice explanation in short video... 👍👍 Really liked it.

[@jukkavahaaho9957]

I really like how you simplified sso 😀

[@shaktixcool1]

@bytebytego how do you create such crystal clear animated videos?

[@RezaShaikhly]

Very nice explanation, many thanks...

[@kaustubhshrivastava3169]

how to make these awesome animated slides i.e which tool do you use for this can you please tell

[@fanclub69]

Wonderful explanation! Thank you dear.

[@j.c.l5932]

Best tutorial about SSO. Just still have some confusion in step 4, the logging in page(in the video 2:07). I just tried one time, if I'm on the compnay's VPN, there isn't login page; is that login page for employee to log in the company's network or it's for logging into the ID service provider's network?

[@shutanovac]

Another epic video. Thanks

[@dibll]

Could you pls cover the following in future segments, if possible: Coordination Service Consensus algorithms B Trees Broadcast Protocols Vector Clocks Thanks!

[@goldfishbrainjohn2462]

Love this channel.

[@黃聰穎-z4r]

Thanks for the video! I learned that there is another way SSO scheme called CAS, and I wonder that what different with OIDC and SAML. Would be great if you can also provide a similar easy to understand video.😁

[@randeep_singh]

Great vid as always! Weird coincidence that I'm currently implementing SSO at my current org

[@hightower-es9qu]

Thank you I did confirm and learned something new. I'm subscribing.

[@user-ll9om2ml8e]

great clarity. Thanks

[@Englishready-ez3ei]

Could you please share the tool that you used to create these videos

[@vish1211]

Very well explained. Thanks a lot!

[@tushartiwari7929]

How smartly he skips twitter at 04:35 🤣

[@haribabuocr34]

3:22 how would the IDP know that the user has already logged in? Is it through some session id or token?

[@gauravmalhotra944]

Good explanation. Thanks. A question though- how does the identity provider know that user has already signed in? What information does user's browser provider to identity provider? If this information is cached in user's browser, is it not prone to client side security attacks?

[@kmSaifullah]

Wow excellent video.👍👍 Make a video on "How a react app works?"

[@ganeshmourya2709]

Can you please tell me the name of software you use to create these animation, I'd like to learn it.....

[@SiddheshPrabhugaonkar]

Me too looking for it. Or it is just PowerPoint?

[@desmondberry528]

Following...

[@ganeshmourya2709]

@@SiddheshPrabhugaonkar i thought that too but it's look much more refined than power point... And if it's powerpoint than he is at God level....

[@nifalconi]

It had some zooms I don’t think it’s PowerPoint

[@ARmy2510]

It's After Effects.

[@luizfelippe2034]

Great explanation, thank you so much.

[@anuragkubade6511]

👍very informative video. Thanks a lot

[@jongpac2]

Thanks for sharing rich information with nice view.

[@matiasmoresi5040]

Great content! Thank you so much for these creations!

[@iffi786]

Thanks for the video. Clearly understandable.

[@vinodcs80]

very simple explaination

[@pawankmoblize]

what tool you are using for this presentation?

[@jeelanyelidandla2477]

Nice explanation, can you please explain OpenID implementation as well?

[@TysonKamp]

Solid explanation. Thank you.

[@Nothing_Else_Matters]

Thank you for the tutorials. Id like to know with which tool you made this video

[@maxchan9770]

So so clear. Thank you, sir.

[@jm9373]

Great content! Would also be great to see how the LDAP protocol fits into the picture.

[@eUnkn0wn]

LDAP is a vendor-neutral protocol to access directory services (think SQL for databases). You might have an Active Directory DS in your company, which you can query using LDAP. Meaning there is one single source of truth for technical user data. This allows for integration with other software, such as an IdP. In practice OIDC/SAML provide SSO (=login once, for everywhere), whereas directly LDAP-backed logins would require you to enter credentials every time.

[@AnshproYT]

My friend, these videos are amaing.Would you mind sharing what application you use to built them ?

[@joaomarcus2742]

Thanks for video, great content!

[@kwaminaessuahmensah8920]

Did anyone else peep how he skipped Twitter when talking about the identity providers you can count on at the end?

[@loydako6285]

lols twitter's n identity crisis right now

[@AceixSmart]

The subtle shade! Twitter has OAuth issues after Elon started tackling the claimed "microservices bloat"

[@padraigconnolly2991]

I could be wrong but I think this channel is associated with Tik Tok, so it would make sense that they skip 🙂

[@Shafty17]

I laughed loud at that point 😂

[@mohammadashrafuddinferdous9347]

Twitterr handled it differently. If i'm not mistaken oauth1 and session based solution. Its different than others.

[@alexsuholitko2528]

Great explanation. Thank you !!!

[@carlotadias9335]

Maybe the 5 minutes most precious of the internet.

[@leanh15]

Super double great contents !!!

[@tomascruz2422]

Thanks for the excelent informatio. can you create another video explaining differece between sso (saml, openid) vs oauth2

[@heminessa]

very helpful and nicely illustrated! Which program you are using to make these explanations?

[@carlotadias9335]

So, when we talk about OAuth 2.0, we are always talking about a scenario of SSO ? Thank you in advance,

[@TechBainCool]

This was a great video

[@lixinyi7734]

I really like your examples! I have one question, how the IDP know that this specific user can skip login and return a SAML assertion? Does this assertion contain SP info?

[@sebastiansosa3072]

What is the difference between SSO and Oauth authentication? The design for Oauth "authorization code grant type" standard seems a lot simpler. Why not just use that?

[@embesozzi]

OAuth is an authorization protocol and OIDC is an “authentication” protocol. So, the idea of “OAuth authentication” is wrong. On the other hand, SSO is achieved when you have an existing session in the IdP.

[@cbesc]

Come for the vids, stay for Sahn Lam.

[@darianzuvic5390]

Very informative and concise

[@Pinefenario]

Interesting! What about ‘login with Apple’. What are they using?

[@sonalgupta6363]

such a wonderfull simplification

[@1511invincible]

love the tutorials. btw, what tool do you use for diagrams?

[@tanishqvyas8387]

What editor is used to edit these videos?

[@jhwild08]

Does anyone know what's the tool to use to accomplish the animation that is used in this video?

[@MrEduarguzher]

How is that different to Oauth2.0 or oauth2.1 PKCE? are these the same? Nice video BTW :)

[@jhwild08]

Love your flow drawing - what do you use for that, if you can share?

[@azharmobeen]

Thanks for sharing, could you please tell me in which tool you have developed these animates diagrams?

[@ashathomas1217]

Simply perfect!

[@hemalpatel3770]

I was wondering about one thing. Does every request user makes go through identity provider and validates everytime?

[@medsalemdeddah8853]

I freaking love you man ❤

[@abhinavsinghal5486]

Just watching your videos made me buy your books. Your diagrams and videos are amazing. Keep up the good work. One question in the above video, does Service Provider and IDP need to be preconfigured to support each other? i.e. Does the Service provider tells IDP in advance that "hey IDP I am using a SAML for clients" so please register me on your IDP. Otherwise, how will IDP know that this SAML is meant for this Service provider? 👏

[@VipulMehta1]

Yes, service provider has to be manually added as relying party in Identity Provider configuration.

[@ankitkumarjain8896]

yes, SP has to register with the IDP and also setup users etc