--- title: "Data Security Guidance: Cybersecurity and Single Sign-On" description: Compliancy Group Help Center --- [Skip to content](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273786-cybersecurity-and-single-sign-on-sso-#main-content) English - United States Show submenu for translations [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new?hsLang=en-us) [Go To Customer Portal](https://help.compliancygroup.com/home?hsLang=en-us) ![Compliancy Group](https://knowledge.compliancygroup.com/hs-fs/hubfs/Compliancy%20Group%20Logo%20Full%20RBG-sized.png?width=300&height=54&name=Compliancy%20Group%20Logo%20Full%20RBG-sized.png) Open main navigation Close main navigation - English - United States Show submenu for translations - [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new) - [Go To Customer Portal](https://help.compliancygroup.com/home) How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://knowledge.compliancygroup.com/home?hsLang=en-us) 2. [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us) 3. [Data Security](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#data-security) # Data Security Guidance: Cybersecurity and Single Sign-On **DISCLAIMER: The information provided in this article, other knowledge base articles, and the Compliancy Group website do not, and are not intended to, constitute legal advice. All information, content, and materials in the Knowledge Base and on the Compliancy Group website are for general informational purposes only.** **What is Single Sign-On, and is it Required by HIPAA?** According to the [Cybersecurity and Infrastructure Agency](https://www.cisa.gov/sites/default/files/2024-06/Barriers-to-SSO-Adoption-for-SMB-508c.pdf) (CISA), single sign-on (SSO) is "SSO is a user authentication and access control system that allows users to access multiple applications, tools, and systems with just one set of credentials. By centralizing the authentication process, SSO streamlines identity management and simplifies the user experience by only needing to remember one username and password for all accounts. SSO can help bolster security measures as it decreases the frequency of users having to input their login credentials. Furthermore, SSO can reduce password duplication across various platforms, consequently reducing the potential for password leakage."  [https://www.cisa.gov/sites/default/files/2024-06/Barriers-to-SSO-Adoption-for-SMB-508c.pdf](https://www.cisa.gov/sites/default/files/2024-06/Barriers-to-SSO-Adoption-for-SMB-508c.pdf) (page 3). HIPAA does not specifically require the implementation of SSO. Single sign-on is an access management measure. The [Health Industry Cybersecurity Practices (HICP](https://405d.hhs.gov/cornerstone/hicp)) publication, "[Technical Volume 1: Cybersecurity Practices for Small Healthcare Organizations](https://405d.hhs.gov/Documents/tech-vol1-508.pdf)," identifies single sign-on as a "best practice" cybersecurity measure for small healthcare organizations, noting that small healthcare organizations can "implement single sign-on systems that automatically manage access to all software and tools once users have signed onto the network. These systems allow your organization to centrally maintain and monitor access." (p. 17). Single sign-on is identified by the [National Institute of Standards and Technology](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf) as an Identification and Authentication Measure. (p. 134). - [Getting started](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#main-content) - [Onboarding](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#onboarding) - [Product Overviews](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#product-overviews) - [Workforce](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#main-content) - [Policies](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#policies) - [Settings Module](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#settings-module) - [3rd Party Risk](https://knowledge.compliancygroup.com/home/3rd-party-risk?hsLang=en-us) - [Incident Management](https://knowledge.compliancygroup.com/home/incident-management?hsLang=en-us) - [Risks & Assessments](https://knowledge.compliancygroup.com/home/risks-assessments?hsLang=en-us) - [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#main-content) - [Privacy](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#privacy) - [Data Security](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#data-security) - [OSHA Workplace Safety](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#osha-workplace-safety) - [Clinical & Quality](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#clinical-quality) - [State Requirements](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#state-requirements) - [Fraud, Waste & Abuse](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#fraud-waste-abuse) - [Compliance Operations](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#compliance-operations) - [Legacy Guard Features](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#main-content) - [Admin - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#admin-legacy) - [Assets - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#assets-legacy) - [Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#documents-legacy) - [Incidents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#incidents-legacy) - [My Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#my-documents-legacy) - [My Tasks - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#my-tasks-legacy) - [People - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#people-legacy) - [Programs - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#programs-legacy) - [Reports - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#reports-legacy) - [The Dashboard - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#the-dashboard-legacy) - [Training - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#training-legacy) - [Vendors - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#vendors-legacy) - [Account & Billing](https://knowledge.compliancygroup.com/home/account-billing?hsLang=en-us) - [The Guard Support](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#main-content) - [P&P Drafts](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#pp-drafts) - [Settings](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#settings) [![compliancy-group-logo-white](https://knowledge.compliancygroup.com/hs-fs/hubfs/compliancy-group-logo-white.png?width=200&height=37&name=compliancy-group-logo-white.png "compliancy-group-logo-white")](http://compliancy-group.com) Contact Us - [support@compliancygroup.com](mailto:support@compliancygroup.com) Copyright © 2026, Compliancy Group LLC Cookie Settings