Skip to content
State-licensed debt collection institute § 118 GewO 1994 · GISA 32140156

Glossary · Austria and Germany

Single sign-on and access rights

Single sign-on, or SSO, lets people access several applications through a shared identity provider. Successful authentication establishes identity within that process. Separate permissions determine which claims and functions the person may access.

Engagement and acceptance are governed by the terms.

Distinguish the concepts

Authentication and authorisation are different tasks. A valid account should not automatically expose every organisation or case. SSO also differs from multi-factor authentication: one centralises login, while the other may require additional evidence. Shared login does not replace appropriate roles or revoking access when staff leave.

Jurisdiction and scope

These technical principles do not depend on a claim’s jurisdiction. In Austria and Germany, personal case data needs protection appropriate to its purpose. Whether a particular application or plan supports SSO depends on the actual offer. This definition does not promise a particular incaseof.law SSO feature.

Illustrative business example

An employee moves from accounts to another department. The company account remains active, but access to receivables is reassessed and, where appropriate, revoked. On departure, existing sessions and connected applications are also considered. Central login alone is not complete access control.

Common questions

Does SSO show every case?

No. Visibility should follow organisation membership and assigned roles, not authentication alone.

Is SSO a second factor?

No. A shared login route and additional identity verification are different functions.

What needs clarification before introduction?

Identity provider, roles, staff changes, session duration and a controlled recovery route, with clear operational responsibility.

Sources and basis

Content reviewed on 23 September 2026. Procedural information and our contractual terms are separate foundations. The individual case remains decisive.

Your next step

Prepare your documents and use the existing registration. For questions about the scope of services, visit our contact page.

Received a letter as a debtor? Please go directly to the payment portal.