Single sign-on (SSO) allows you to access all authorized applications and services for an extended period (typically eight hours) after authenticating just once.

The University of Chicago uses a tool called Okta to enable SSO. Once you log in to an online application that uses SSO, such as MyAccount (myaccount.uchicago.edu), you will be able to access other Okta-protected online services without needing to log in to each application.

These services include:

• UChicago Microsoft 365 (portal.office.com)
• Library resources (lib.uchicago.edu), including internal and external resource databases and the campus proxy server
• my.UChicago (my.uchicago.edu), the campus portal
• Directory (directory.uchicago.edu), the campus online people directory.

---

How SSO Works with Websites and Applications

Single sign-on uses Okta which allows you to access websites securely across applications and organizations without having to reauthenticate using your CNetID and password each time.

Okta-protected sites at the University also use two-factor authentication (see Two-Factor Authentication which uses both your CNetID and password.)

Notes:

• Not all University applications use SSO.
• Access to some Okta-protected sites does not imply that you can access all Okta-protected sites. Your access to an application will depend on your status within the University.
• Some SSO-protected sites require you to authenticate even if you have already authenticated using an SSO-enabled site (both Workday and cVPN require reauthentication).