{"id":27509,"date":"2026-07-31T13:29:59","date_gmt":"2026-07-31T11:29:59","guid":{"rendered":"https:\/\/weare.fi\/?p=27509"},"modified":"2026-07-31T13:30:01","modified_gmt":"2026-07-31T11:30:01","slug":"kertakirjautuminen-hyodyt-ja-haitat-2","status":"publish","type":"post","link":"https:\/\/weare.fi\/en\/kertakirjautuminen-hyodyt-ja-haitat-2\/","title":{"rendered":"Benefits and Risks of Single Sign-On"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"27509\" class=\"elementor elementor-27509\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-30a7f79f elementor-section-content-middle elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"30a7f79f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;motion_fx_opacity_range&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:{&quot;start&quot;:20,&quot;end&quot;:30}},&quot;sticky&quot;:&quot;top&quot;,&quot;motion_fx_motion_fx_scrolling&quot;:&quot;yes&quot;,&quot;motion_fx_opacity_effect&quot;:&quot;yes&quot;,&quot;_ha_eqh_enable&quot;:false,&quot;motion_fx_opacity_direction&quot;:&quot;out-in&quot;,&quot;motion_fx_opacity_level&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:10,&quot;sizes&quot;:[]},&quot;motion_fx_devices&quot;:[&quot;desktop&quot;,&quot;tablet_extra&quot;,&quot;tablet&quot;,&quot;mobile_extra&quot;,&quot;mobile&quot;],&quot;sticky_on&quot;:[&quot;desktop&quot;,&quot;tablet_extra&quot;,&quot;tablet&quot;,&quot;mobile_extra&quot;,&quot;mobile&quot;],&quot;sticky_offset&quot;:0,&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-top-column elementor-element elementor-element-338c91c9\" data-id=\"338c91c9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-395c126a elementor-widget elementor-widget-theme-site-logo elementor-widget-image\" data-id=\"395c126a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-site-logo.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/weare.fi\/en\">\n\t\t\t<img decoding=\"async\" width=\"429\" height=\"89\" src=\"https:\/\/weare.fi\/wp-content\/uploads\/2021\/10\/pieni_logo_horiso@2x-78x16.png\" class=\"attachment-full size-full wp-image-2197\" alt=\"\" srcset=\"https:\/\/weare.fi\/wp-content\/uploads\/2021\/10\/pieni_logo_horiso@2x.png 429w, https:\/\/weare.fi\/wp-content\/uploads\/2021\/10\/pieni_logo_horiso@2x-300x62.png 300w, https:\/\/weare.fi\/wp-content\/uploads\/2021\/10\/pieni_logo_horiso@2x-18x4.png 18w, https:\/\/weare.fi\/wp-content\/uploads\/2021\/10\/pieni_logo_horiso@2x-78x16.png 78w\" sizes=\"(max-width: 429px) 100vw, 429px\" \/>\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-top-column elementor-element elementor-element-7427e1f7\" data-id=\"7427e1f7\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3d3265b8 elementor-nav-menu__align-end header elementor-nav-menu--dropdown-tablet_extra elementor-hidden-tablet_extra elementor-hidden-tablet elementor-hidden-mobile_extra elementor-hidden-mobile elementor-nav-menu__text-align-aside elementor-nav-menu--toggle elementor-nav-menu--burger elementor-widget elementor-widget-nav-menu\" data-id=\"3d3265b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;submenu_icon&quot;:{&quot;value&quot;:&quot;&lt;i class=\\&quot;fas fa-chevron-down\\&quot; aria-hidden=\\&quot;true\\&quot;&gt;&lt;\\\/i&gt;&quot;,&quot;library&quot;:&quot;fa-solid&quot;},&quot;layout&quot;:&quot;horizontal&quot;,&quot;toggle&quot;:&quot;burger&quot;}\" data-widget_type=\"nav-menu.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<nav aria-label=\"Menu\" class=\"elementor-nav-menu--main elementor-nav-menu__container elementor-nav-menu--layout-horizontal e--pointer-none\">\n\t\t\t\t<ul id=\"menu-1-3d3265b8\" class=\"elementor-nav-menu\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-16592\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/\" class=\"elementor-item menu-link\">Splunk<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25551\"><a href=\"https:\/\/weare.fi\/en\/splunk-enterprise-pricing\/\" class=\"elementor-sub-item menu-link\">Splunk Enterprice Pricing<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-24023\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability\/\" class=\"elementor-item menu-link\">Observability<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19823\"><a href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability-as-a-service\/\" class=\"elementor-sub-item menu-link\">Observointi palveluna<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-21974\"><a href=\"https:\/\/weare.fi\/en\/palvelut\/weare-observability-hub\/\" class=\"elementor-sub-item menu-link\">Observability Hub<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-24069\"><a href=\"https:\/\/weare.fi\/en\/free-observability-maturity-assessment\/\" class=\"elementor-sub-item menu-link\">Free Observability Maturity Assessment<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25944\"><a href=\"https:\/\/weare.fi\/en\/observability-e-book-full-visibility-in-distributed-architecture\/\" class=\"elementor-sub-item menu-link\">Observability Playbook<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-23594\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/\" class=\"elementor-item menu-link\">Atlassian<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-23595\"><a href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/jira-consulting\/\" class=\"elementor-sub-item menu-link\">Jira Services<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2467\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/uutiset\/\" class=\"elementor-item menu-link\">Blogs<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19720\"><a href=\"https:\/\/weare.fi\/en\/asiakastarinat\/\" class=\"elementor-sub-item menu-link\">Asiakastarinat<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-12800\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/meista\/\" class=\"elementor-item menu-link\">Meist\u00e4<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-11982\"><a href=\"https:\/\/careers.weare.fi\/\" class=\"elementor-sub-item menu-link\">Rekrytointi<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-2753\"><a href=\"https:\/\/weare.fi\/en\/meista\/yritysvastuullisuus\/\" class=\"elementor-sub-item menu-link\">Yritysvastuullisuus<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t<div class=\"elementor-menu-toggle\" role=\"button\" tabindex=\"0\" aria-label=\"Menu Toggle\" aria-expanded=\"false\">\n\t\t\t<i aria-hidden=\"true\" role=\"presentation\" class=\"elementor-menu-toggle__icon--open eicon-menu-bar\"><\/i><i aria-hidden=\"true\" role=\"presentation\" class=\"elementor-menu-toggle__icon--close eicon-close\"><\/i>\t\t<\/div>\n\t\t\t\t\t<nav class=\"elementor-nav-menu--dropdown elementor-nav-menu__container\" aria-hidden=\"true\">\n\t\t\t\t<ul id=\"menu-2-3d3265b8\" class=\"elementor-nav-menu\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-16592\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Splunk<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25551\"><a href=\"https:\/\/weare.fi\/en\/splunk-enterprise-pricing\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Splunk Enterprice Pricing<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-24023\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Observability<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19823\"><a href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability-as-a-service\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observointi palveluna<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-21974\"><a href=\"https:\/\/weare.fi\/en\/palvelut\/weare-observability-hub\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observability Hub<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-24069\"><a href=\"https:\/\/weare.fi\/en\/free-observability-maturity-assessment\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Free Observability Maturity Assessment<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25944\"><a href=\"https:\/\/weare.fi\/en\/observability-e-book-full-visibility-in-distributed-architecture\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observability Playbook<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-23594\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Atlassian<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-23595\"><a href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/jira-consulting\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Jira Services<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2467\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/uutiset\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Blogs<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19720\"><a href=\"https:\/\/weare.fi\/en\/asiakastarinat\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Asiakastarinat<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-12800\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/meista\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Meist\u00e4<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-11982\"><a href=\"https:\/\/careers.weare.fi\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Rekrytointi<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-2753\"><a href=\"https:\/\/weare.fi\/en\/meista\/yritysvastuullisuus\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Yritysvastuullisuus<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1cdb4865 elementor-nav-menu__align-end header elementor-nav-menu--dropdown-tablet_extra elementor-hidden-desktop elementor-nav-menu--stretch elementor-nav-menu__text-align-aside elementor-nav-menu--toggle elementor-nav-menu--burger elementor-widget elementor-widget-nav-menu\" data-id=\"1cdb4865\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;submenu_icon&quot;:{&quot;value&quot;:&quot;&lt;i class=\\&quot;fas fa-chevron-down\\&quot; aria-hidden=\\&quot;true\\&quot;&gt;&lt;\\\/i&gt;&quot;,&quot;library&quot;:&quot;fa-solid&quot;},&quot;full_width&quot;:&quot;stretch&quot;,&quot;layout&quot;:&quot;horizontal&quot;,&quot;toggle&quot;:&quot;burger&quot;}\" data-widget_type=\"nav-menu.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<nav aria-label=\"Menu\" class=\"elementor-nav-menu--main elementor-nav-menu__container elementor-nav-menu--layout-horizontal e--pointer-none\">\n\t\t\t\t<ul id=\"menu-1-1cdb4865\" class=\"elementor-nav-menu\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-17209\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/\" class=\"elementor-item menu-link\">Splunk<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25724\"><a href=\"https:\/\/weare.fi\/en\/splunk-enterprise-pricing\/\" class=\"elementor-sub-item menu-link\">Splunk Enterprice Pricing<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-25727\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability\/\" class=\"elementor-item menu-link\">Observability<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25726\"><a href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability-as-a-service\/\" class=\"elementor-sub-item menu-link\">Observability as a Service<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25725\"><a href=\"https:\/\/weare.fi\/en\/palvelut\/weare-observability-hub\/\" class=\"elementor-sub-item menu-link\">Observability Hub<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25728\"><a href=\"https:\/\/weare.fi\/en\/free-observability-maturity-assessment\/\" class=\"elementor-sub-item menu-link\">Free Observability Maturity Assessment<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25945\"><a href=\"https:\/\/weare.fi\/en\/observability-e-book-full-visibility-in-distributed-architecture\/\" class=\"elementor-sub-item menu-link\">Observability Playbook<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-23719\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/\" class=\"elementor-item menu-link\">Atlassian<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-23720\"><a href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/jira-consulting\/\" class=\"elementor-sub-item menu-link\">Jira<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2632\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/uutiset\/\" class=\"elementor-item menu-link\">Blogs<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19721\"><a href=\"https:\/\/weare.fi\/en\/asiakastarinat\/\" class=\"elementor-sub-item menu-link\">Asiakastarinat<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-12801\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/meista\/\" class=\"elementor-item menu-link\">Meist\u00e4<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-11990\"><a href=\"https:\/\/careers.weare.fi\/\" class=\"elementor-sub-item menu-link\">Rekrytointi<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-4801\"><a href=\"https:\/\/weare.fi\/en\/meista\/yritysvastuullisuus\/\" class=\"elementor-sub-item menu-link\">Yritysvastuullisuus<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-13935\"><a href=\"https:\/\/weare.fi\/en\/ota-yhteytta\/\" class=\"elementor-item menu-link\">Ota yhteytt\u00e4<\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2636\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/fi.png\" width=\"18\" height=\"12\" alt=\"fi\" title=\"Finnish\"><span class=\"trp-ls-language-name\">FI<\/span><\/span><\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2634\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/en_GB.png\" width=\"18\" height=\"12\" alt=\"en_GB\" title=\"English\"><span class=\"trp-ls-language-name\">EN<\/span><\/span><\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t<div class=\"elementor-menu-toggle\" role=\"button\" tabindex=\"0\" aria-label=\"Menu Toggle\" aria-expanded=\"false\">\n\t\t\t<i aria-hidden=\"true\" role=\"presentation\" class=\"elementor-menu-toggle__icon--open eicon-menu-bar\"><\/i><i aria-hidden=\"true\" role=\"presentation\" class=\"elementor-menu-toggle__icon--close eicon-close\"><\/i>\t\t<\/div>\n\t\t\t\t\t<nav class=\"elementor-nav-menu--dropdown elementor-nav-menu__container\" aria-hidden=\"true\">\n\t\t\t\t<ul id=\"menu-2-1cdb4865\" class=\"elementor-nav-menu\"><li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-17209\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Splunk<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25724\"><a href=\"https:\/\/weare.fi\/en\/splunk-enterprise-pricing\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Splunk Enterprice Pricing<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-25727\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Observability<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25726\"><a href=\"https:\/\/weare.fi\/en\/splunk-konsultointipalvelut\/observability-as-a-service\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observability as a Service<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25725\"><a href=\"https:\/\/weare.fi\/en\/palvelut\/weare-observability-hub\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observability Hub<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25728\"><a href=\"https:\/\/weare.fi\/en\/free-observability-maturity-assessment\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Free Observability Maturity Assessment<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-25945\"><a href=\"https:\/\/weare.fi\/en\/observability-e-book-full-visibility-in-distributed-architecture\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Observability Playbook<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-23719\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Atlassian<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-23720\"><a href=\"https:\/\/weare.fi\/en\/atlassian-solutions-consulting-services\/jira-consulting\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Jira<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2632\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/uutiset\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Blogs<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-19721\"><a href=\"https:\/\/weare.fi\/en\/asiakastarinat\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Asiakastarinat<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-12801\"><a aria-expanded=\"false\" href=\"https:\/\/weare.fi\/en\/meista\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Meist\u00e4<span role=\"button\" class=\"dropdown-menu-toggle ast-header-navigation-arrow\" tabindex=\"0\" aria-expanded=\"false\" aria-label=\"Menu Toggle\" aria-haspopup=\"true\"><\/span><span class=\"sub-arrow\"><i class=\"fas fa-chevron-down\" aria-hidden=\"true\"><\/i><\/span><\/a>\n<ul class=\"sub-menu elementor-nav-menu--dropdown\">\n\t<li class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-11990\"><a href=\"https:\/\/careers.weare.fi\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Rekrytointi<\/a><\/li>\n\t<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-4801\"><a href=\"https:\/\/weare.fi\/en\/meista\/yritysvastuullisuus\/\" class=\"elementor-sub-item menu-link\" tabindex=\"-1\">Yritysvastuullisuus<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"menu-item menu-item-type-post_type menu-item-object-page menu-item-13935\"><a href=\"https:\/\/weare.fi\/en\/ota-yhteytta\/\" class=\"elementor-item menu-link\" tabindex=\"-1\">Ota yhteytt\u00e4<\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2636\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\" tabindex=\"-1\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/fi.png\" width=\"18\" height=\"12\" alt=\"fi\" title=\"Finnish\"><span class=\"trp-ls-language-name\">FI<\/span><\/span><\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2634\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\" tabindex=\"-1\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/en_GB.png\" width=\"18\" height=\"12\" alt=\"en_GB\" title=\"English\"><span class=\"trp-ls-language-name\">EN<\/span><\/span><\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-top-column elementor-element elementor-element-159d77ef elementor-hidden-mobile\" data-id=\"159d77ef\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-38e99ce6 elementor-hidden-tablet_extra elementor-hidden-tablet elementor-hidden-mobile_extra elementor-hidden-mobile elementor-widget elementor-widget-button\" data-id=\"38e99ce6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/ota-yhteytta\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Ota yhteytt\u00e4<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-top-column elementor-element elementor-element-52e0c118 elementor-hidden-mobile\" data-id=\"52e0c118\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e079aea elementor-nav-menu__align-center elementor-hidden-tablet_extra elementor-hidden-tablet elementor-hidden-mobile_extra elementor-hidden-mobile elementor-nav-menu--dropdown-tablet elementor-nav-menu__text-align-aside elementor-widget elementor-widget-nav-menu\" data-id=\"e079aea\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;submenu_icon&quot;:{&quot;value&quot;:&quot;&lt;i class=\\&quot;fas fa-globe\\&quot; aria-hidden=\\&quot;true\\&quot;&gt;&lt;\\\/i&gt;&quot;,&quot;library&quot;:&quot;fa-solid&quot;},&quot;layout&quot;:&quot;horizontal&quot;}\" data-widget_type=\"nav-menu.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<nav aria-label=\"Menu\" class=\"elementor-nav-menu--main elementor-nav-menu__container elementor-nav-menu--layout-horizontal e--pointer-none\">\n\t\t\t\t<ul id=\"menu-1-e079aea\" class=\"elementor-nav-menu\"><li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2418\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/en_GB.png\" width=\"18\" height=\"12\" alt=\"en_GB\" title=\"English\"><span class=\"trp-ls-language-name\">EN<\/span><\/span><\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2420\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/fi.png\" width=\"18\" height=\"12\" alt=\"fi\" title=\"Finnish\"><span class=\"trp-ls-language-name\">FI<\/span><\/span><\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<nav class=\"elementor-nav-menu--dropdown elementor-nav-menu__container\" aria-hidden=\"true\">\n\t\t\t\t<ul id=\"menu-2-e079aea\" class=\"elementor-nav-menu\"><li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2418\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\" tabindex=\"-1\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/en_GB.png\" width=\"18\" height=\"12\" alt=\"en_GB\" title=\"English\"><span class=\"trp-ls-language-name\">EN<\/span><\/span><\/a><\/li>\n<li class=\"trp-language-switcher-container menu-item menu-item-type-post_type menu-item-object-language_switcher current-language-menu-item menu-item-2420\"><a href=\"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509#TRPLINKPROCESSED\" class=\"elementor-item elementor-item-anchor menu-link\" tabindex=\"-1\"><span data-no-translation><img decoding=\"async\" class=\"trp-flag-image\" src=\"https:\/\/weare.fi\/wp-content\/plugins\/translatepress-multilingual\/assets\/images\/flags\/fi.png\" width=\"18\" height=\"12\" alt=\"fi\" title=\"Finnish\"><span class=\"trp-ls-language-name\">FI<\/span><\/span><\/a><\/li>\n<\/ul>\t\t\t<\/nav>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4b91cd6c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4b91cd6c\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;tilt&quot;}\">\n\t\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"false\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 1000 100\" preserveAspectRatio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M0,6V0h1000v100L0,6z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-60aa8fa0\" data-id=\"60aa8fa0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-215e112 elementor-widget elementor-widget-spacer\" data-id=\"215e112\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-30b7c61a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"30b7c61a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-18b1490b\" data-id=\"18b1490b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26cd67c elementor-widget elementor-widget-spacer\" data-id=\"26cd67c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b89341c elementor-widget elementor-widget-image\" data-id=\"b89341c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"712\" src=\"https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-1024x712.jpg\" class=\"attachment-large size-large wp-image-1381\" alt=\"\" srcset=\"https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-1024x712.jpg 1024w, https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-300x208.jpg 300w, https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-768x534.jpg 768w, https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-1536x1067.jpg 1536w, https:\/\/weare.fi\/wp-content\/uploads\/2020\/11\/alex-VxtWBOQjGdI-unsplash-2048x1423.jpg 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7858caf2 elementor-share-buttons--skin-flat elementor-grid-3 elementor-share-buttons--view-icon elementor-share-buttons--shape-square elementor-share-buttons--color-official elementor-widget elementor-widget-share-buttons\" data-id=\"7858caf2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_facebook\" role=\"button\" tabindex=\"0\" aria-label=\"Share on facebook\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-facebook\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_twitter\" role=\"button\" tabindex=\"0\" aria-label=\"Share on twitter\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-twitter\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" role=\"button\" tabindex=\"0\" aria-label=\"Share on linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c557567 elementor-align-center elementor-widget elementor-widget-post-info\" data-id=\"5c557567\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-b2a862d elementor-inline-item\" itemprop=\"author\">\n\t\t\t\t\t\t<a href=\"https:\/\/weare.fi\/en\/author\/wpadmin\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-author\">\n\t\t\t\t\t\t\t\t\t\twpadmin\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5af03e2 elementor-hidden-mobile elementor-widget elementor-widget-spacer\" data-id=\"5af03e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17e6e70 elementor-widget elementor-widget-heading\" data-id=\"17e6e70\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Kertakirjautumisen hy\u00f6dyt ja riskit<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d4606de elementor-widget elementor-widget-text-editor\" data-id=\"d4606de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\"><i>This article is based on the previous blog posts written by Kari Laalo.<\/i><\/p>\n<p><br \/><span style=\"font-weight: 400;\">Kertakirjautuminen eli SSO mahdollistaa useiden sovellusten k\u00e4yt\u00f6n yhden keskitetyn tunnistautumisen avulla. K\u00e4ytt\u00e4j\u00e4n ei tarvitse yll\u00e4pit\u00e4\u00e4 erillist\u00e4 salasanaa jokaiseen palveluun, ja organisaatio voi toteuttaa tunnistautumisen keskeiset politiikat yhdess\u00e4 paikassa.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Keskitt\u00e4minen tuo samalla uudenlaisen riskin. Jos tunnistuspalvelu ei ole k\u00e4ytett\u00e4viss\u00e4, jos sen m\u00e4\u00e4ritys on virheellinen tai jos k\u00e4ytt\u00e4j\u00e4n keskitetty tunnus vaarantuu, vaikutus voi ulottua moneen sovellukseen. SSO ei siis ole automaattisesti turvallinen tai turvaton. Lopputulos riippuu arkkitehtuurista, tunnistautumismenetelmist\u00e4, k\u00e4ytt\u00f6oikeuksista, elinkaaren hallinnasta, valvonnasta ja palautumiskyvyst\u00e4.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Hyvin toteutettuna kertakirjautuminen parantaa sek\u00e4 k\u00e4ytt\u00f6kokemusta ett\u00e4 tietoturvaa. Huonosti hallittuna se siirt\u00e4\u00e4 hajallaan olevat ongelmat keskeiseen palveluun ja kasvattaa yksitt\u00e4isen virheen vaikutusta.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b53746 elementor-widget elementor-widget-heading\" data-id=\"8b53746\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Lyhyesti: SSO:n t\u00e4rkeimm\u00e4t hy\u00f6dyt ja riskit<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-baa28bd elementor-widget elementor-widget-text-editor\" data-id=\"baa28bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div dir=\"ltr\" style=\"margin-left: 0pt;\" align=\"left\">\n<table style=\"border: none; border-collapse: collapse;\"><colgroup><col width=\"195\" \/><col width=\"429\" \/><\/colgroup>\n<tbody>\n<tr style=\"height: 20.25pt;\">\n<td style=\"vertical-align: top; background-color: #fff4e4; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Hy\u00f6ty<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; background-color: #fff4e4; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Mit\u00e4 se k\u00e4yt\u00e4nn\u00f6ss\u00e4 tarkoittaa?<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Sujuvampi k\u00e4ytt\u00e4j\u00e4kokemus<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">K\u00e4ytt\u00e4j\u00e4 tunnistautuu harvemmin ja kohtaa yhdenmukaisen kirjautumistavan eri sovelluksissa.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">V\u00e4hemm\u00e4n sovelluskohtaisia salasanoja<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Salasanojen muistaminen, uudelleenk\u00e4ytt\u00f6 ja nollauspyynn\u00f6t v\u00e4henev\u00e4t.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Keskitetyt tunnistupolitiikat<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">MFA, tietojenkalastelua kest\u00e4v\u00e4t menetelm\u00e4t ja riskiperusteiset vaatimukset voidaan ottaa k\u00e4ytt\u00f6\u00f6n johdonmukaisesti.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 20.25pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Nopeampi sovellusten k\u00e4ytt\u00f6\u00f6notto<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Hyv\u00e4ksytty SAML- tai OIDC-malli nopeuttaa uusien palvelujen liitt\u00e4mist\u00e4.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 20.25pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Parempi n\u00e4kyvyys<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Kirjautumistapahtumia voidaan valvoa, yhdistell\u00e4 ja tutkia keskitetysti.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Hallitumpi tietojen luovutus<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Sovellukselle voidaan v\u00e4litt\u00e4\u00e4 vain k\u00e4ytt\u00f6tarkoitukseen tarvittavat tunnisteet ja attribuutit.<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p data-path-to-node=\"7\">\u00a0<\/p>\n<div dir=\"ltr\" style=\"margin-left: 0pt;\" align=\"left\">\n<table style=\"border: none; border-collapse: collapse;\"><colgroup><col width=\"194\" \/><col width=\"430\" \/><\/colgroup>\n<tbody>\n<tr style=\"height: 20.25pt;\">\n<td style=\"vertical-align: top; background-color: #fff4e4; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Riski<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; background-color: #fff4e4; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Miksi se on t\u00e4rke\u00e4?<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 20.25pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Keskitetty saatavuusriippuvuus<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Tunnistuspalvelun tai sen riippuvuuden h\u00e4iri\u00f6 voi est\u00e4\u00e4 p\u00e4\u00e4syn useisiin sovelluksiin.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Vaarantuneen tunnuksen laaja vaikutus<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Yksi kaapattu tili voi avata p\u00e4\u00e4syn moneen palveluun k\u00e4ytt\u00e4j\u00e4n oikeuksien rajoissa.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Virheelliset m\u00e4\u00e4ritykset ja luottamussuhteet<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">V\u00e4\u00e4r\u00e4 issuer, audience, redirect-osoite, avain tai attribuuttitulkinta voi aiheuttaa vakavan haavoittuvuuden.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Vanhentuneet tai liian laajat oikeudet<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">SSO todentaa k\u00e4ytt\u00e4j\u00e4n, mutta ei yksin pid\u00e4 sovellusten k\u00e4ytt\u00f6oikeuksia ajan tasalla.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr style=\"height: 30pt;\">\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #0d1c4d; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Tietosuoja- ja seurantariski<\/span><\/p>\n<\/td>\n<td style=\"vertical-align: top; padding: 5pt 6pt 5pt 6pt; overflow: hidden; overflow-wrap: break-word; border: solid #eeeeee 0.9375pt;\">\n<p dir=\"ltr\" style=\"line-height: 1.344; margin-left: 6pt; margin-top: 0pt; margin-bottom: 0pt;\"><span style=\"font-size: 9pt; font-family: Arial,sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;\">Keskitetty palvelu n\u00e4kee laajasti kirjautumistapahtumia ja voi yhdist\u00e4\u00e4 tietoja eri palveluista.<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c9e0b7 elementor-widget elementor-widget-text-editor\" data-id=\"4c9e0b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Kertakirjautumisen tavoite ei ole poistaa kaikkea tunnistautumisen kitkaa. Arkaluonteinen toiminto voi edelleen vaatia tuoreen tai vahvemman tunnistautumisen. Turvallinen k\u00e4ytt\u00f6kokemus v\u00e4hent\u00e4\u00e4 turhaa kitkaa ja lis\u00e4\u00e4 sit\u00e4 silloin, kun riski sit\u00e4 edellytt\u00e4\u00e4.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0051ae2 elementor-widget elementor-widget-heading\" data-id=\"0051ae2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Kertakirjautumisen hy\u00f6dyt\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b44bcf elementor-widget elementor-widget-text-editor\" data-id=\"8b44bcf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><b>Sujuvampi k\u00e4ytt\u00f6 ja v\u00e4hemm\u00e4n keskeytyksi\u00e4<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">K\u00e4ytt\u00e4j\u00e4n kannalta n\u00e4kyvin hy\u00f6ty on kirjautumisten v\u00e4heneminen. Kun k\u00e4ytt\u00e4j\u00e4ll\u00e4 on voimassa oleva tunnistuspalvelun istunto, sovellus voi hyv\u00e4ksy\u00e4 tunnistuspalvelun v\u00e4litt\u00e4m\u00e4n tuloksen ilman uutta salasanakysely\u00e4.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">T\u00e4m\u00e4 helpottaa p\u00e4ivitt\u00e4ist\u00e4 ty\u00f6t\u00e4 erityisesti organisaatioissa, joissa k\u00e4ytet\u00e4\u00e4n useita selain-, mobiili- ja pilvipalveluja. Uuden ty\u00f6ntekij\u00e4n ei tarvitse opetella jokaiselle sovellukselle erilaista kirjautumistapaa. My\u00f6s tuttu kirjautumisn\u00e4kym\u00e4 auttaa k\u00e4ytt\u00e4j\u00e4\u00e4 tunnistamaan, milloin h\u00e4n on oikeassa palvelussa.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">SSO ei kuitenkaan tarkoita sit\u00e4, ett\u00e4 k\u00e4ytt\u00e4j\u00e4 ei koskaan tunnistaudu uudelleen. Istunnon vanheneminen, uusi laite, poikkeava riski tai kriittinen toiminto voi edellytt\u00e4\u00e4 uutta tai vahvempaa tunnistautumista. N\u00e4iden tilanteiden pit\u00e4\u00e4 olla ennakoitavia ja k\u00e4ytt\u00e4j\u00e4lle ymm\u00e4rrett\u00e4vi\u00e4.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9e1879 elementor-widget elementor-widget-heading\" data-id=\"b9e1879\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Yhdenmukaiset ja vahvemmat tunnistuspolitiikat<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a5bcd5 elementor-widget elementor-widget-text-editor\" data-id=\"2a5bcd5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Hajautetussa ymp\u00e4rist\u00f6ss\u00e4 jokainen sovellus voi toteuttaa salasanat, MFA:n, istunnot ja palautumisen eri tavalla. Keskitetty tunnistuspalvelu antaa organisaatiolle mahdollisuuden ottaa hyv\u00e4ksytyt kontrollit k\u00e4ytt\u00f6\u00f6n johdonmukaisemmin.<\/p>\n<p>Keskitetyss\u00e4 palvelussa voidaan m\u00e4\u00e4ritt\u00e4\u00e4 esimerkiksi:<\/p>\n<ul>\n<li>mitk\u00e4 k\u00e4ytt\u00e4j\u00e4t tarvitsevat monivaiheisen tunnistautumisen<\/li>\n<li>miss\u00e4 palveluissa vaaditaan tietojenkalastelua kest\u00e4v\u00e4 menetelm\u00e4<\/li>\n<li>milloin vaaditaan tuore tunnistautuminen tai step-up<\/li>\n<li>miten uusi tunnistusv\u00e4line rekister\u00f6id\u00e4\u00e4n ja palautetaan<\/li>\n<li>miten poikkeava laite, sijainti tai k\u00e4ytt\u00e4ytyminen vaikuttaa p\u00e4\u00e4t\u00f6kseen<\/li>\n<li>kuinka yll\u00e4pit\u00e4jien ja tavallisten k\u00e4ytt\u00e4jien tunnistautuminen erotetaan.<\/li>\n<\/ul>\n<p>MFA tarkoittaa kahden tai useamman eri tunnistustekij\u00e4n k\u00e4ytt\u00e4mist\u00e4. Salasana ja erillinen hallussa oleva tunniste muodostavat tavallisesti kaksivaiheisen tai kaksivaiheiseen todentamiseen perustuvan kokonaisuuden, eiv\u00e4t kolmea tunnistustekij\u00e4\u00e4. Kaikki MFA-menetelm\u00e4t eiv\u00e4t suojaa tietojenkalastelulta yht\u00e4 hyvin. WebAuthniin ja FIDO-tekniikkaan perustuvat menetelm\u00e4t sitovat tunnistautumisen oikeaan palveluun eiv\u00e4tk\u00e4 perustu k\u00e4ytt\u00e4j\u00e4n sy\u00f6tt\u00e4m\u00e4\u00e4n kertak\u00e4ytt\u00f6koodiin.<\/p>\n<h3><b>Nopeampi ja hallitumpi sovellusten liitt\u00e4minen<\/b><\/h3>\n<p>Kun organisaatiolla on hyv\u00e4ksytty SAML- tai OpenID Connect -integraatiomalli, uutta sovellusta ei tarvitse suunnitella alusta asti. Toistettava liitt\u00e4misprosessi voi nopeuttaa k\u00e4ytt\u00f6\u00f6nottoa ja parantaa laatua.<\/p>\n<p>Hyv\u00e4 prosessi m\u00e4\u00e4ritt\u00e4\u00e4 ainakin sovelluksen omistajan, k\u00e4ytt\u00e4j\u00e4ryhm\u00e4t, riskitason, tunnisteet, attribuutit, vaaditun tunnistautumisen, k\u00e4ytt\u00f6oikeuksien l\u00e4hteen, istunnot, lokituksen, palautumisen ja k\u00e4yt\u00f6st\u00e4poiston. Pelkk\u00e4 tekninen SSO-liit\u00e4nt\u00e4 ei ole valmis hallintamalli.<\/p>\n<p>SSO voi my\u00f6s helpottaa k\u00e4ytt\u00e4j\u00e4n poistumista organisaatiosta. Keskitetyn tunnuksen sulkeminen est\u00e4\u00e4 tavallisesti uuden federoidun kirjautumisen. T\u00e4m\u00e4 on merkitt\u00e4v\u00e4 etu verrattuna tilanteeseen, jossa jokaisella sovelluksella on erillinen salasana.<\/p>\n<p>Etua ei pid\u00e4 kuitenkaan liioitella. Paikalliset tilit, k\u00e4ytt\u00f6oikeudet, sovellusistunnot ja refresh tokenit voivat j\u00e4\u00e4d\u00e4 voimaan. Provisionointi, deprovisiointi, k\u00e4ytt\u00f6oikeustarkastukset ja istuntojen peruminen pit\u00e4\u00e4 toteuttaa erikseen esimerkiksi SCIM-protokollan, toimittajan rajapinnan tai muun hallitun prosessin avulla.<\/p>\n<h3><b>Parempi n\u00e4kyvyys ja nopeampi reagointi<\/b><\/h3>\n<p>Keskitetty tunnistuspalvelu tuottaa yhdenmukaisia tapahtumia kirjautumisista, ep\u00e4onnistumisista, MFA-haasteista, laitteista ja poikkeamista. Kun n\u00e4m\u00e4 tapahtumat yhdistet\u00e4\u00e4n sovellusten, k\u00e4ytt\u00f6oikeuksien ja infrastruktuurin lokeihin, organisaatio voi havaita v\u00e4\u00e4rink\u00e4yt\u00f6ksi\u00e4 ja tutkia niit\u00e4 aiempaa tehokkaammin.<\/p>\n<p>Valvonnassa voidaan seurata esimerkiksi:<\/p>\n<ul>\n<li>ep\u00e4tavallisia sijainteja, laitteita ja kirjautumisaikoja<\/li>\n<li>toistuvia ep\u00e4onnistumisia ja tilien lukkiutumisia<\/li>\n<li>uuden tunnistusv\u00e4lineen rekister\u00f6inti\u00e4<\/li>\n<li>yll\u00e4pit\u00e4j\u00e4n kirjautumisia ja step-up-tapahtumia<\/li>\n<li>poikkeavia attribuutti- tai roolimuutoksia<\/li>\n<li>toimintaa, joka jatkuu tunnuksen sulkemisen j\u00e4lkeen<\/li>\n<li>tunnistuspalvelun ja sen riippuvuuksien saatavuutta.<\/li>\n<\/ul>\n<p>Tunnistusloki ei yksin kerro, mit\u00e4 k\u00e4ytt\u00e4j\u00e4 teki sovelluksessa. Riitt\u00e4v\u00e4 audit trail tarvitsee yhteisen korrelaation tunnistuspalvelun, sovelluksen ja k\u00e4ytt\u00f6oikeusp\u00e4\u00e4t\u00f6sten v\u00e4lill\u00e4. Lokeihin ei pid\u00e4 tallentaa salasanoja, yksityisi\u00e4 avaimia tai tarpeettomia tokenarvoja.<\/p>\n<h3>Tietojen minimointi ja yhdenmukaisempi tietosuoja<\/h3>\n<p>Federoidussa kirjautumisessa sovellukselle voidaan v\u00e4litt\u00e4\u00e4 vain sen k\u00e4ytt\u00f6tarkoitukseen tarvittavat tiedot. Sovellus voi esimerkiksi tarvita tiedon k\u00e4ytt\u00e4j\u00e4n organisaatiosta tai oikeusryhm\u00e4st\u00e4, mutta ei v\u00e4ltt\u00e4m\u00e4tt\u00e4 nime\u00e4, s\u00e4hk\u00f6postiosoitetta tai muuta suoraan tunnistavaa tietoa.<\/p>\n<p>Palvelukohtaiset tai parittaiset pseudonyymit tunnisteet voivat v\u00e4hent\u00e4\u00e4 k\u00e4ytt\u00e4j\u00e4n toiminnan yhdistelt\u00e4vyytt\u00e4 sovellusten v\u00e4lill\u00e4. Pseudonyymi tai opaakki tunniste ei silti ole automaattisesti anonyymi. Se voi olla henkil\u00f6tieto, jos k\u00e4ytt\u00e4j\u00e4 voidaan tunnistaa suoraan tai muun tiedon avulla.<\/p>\n<p>Keskitt\u00e4minen helpottaa attribuuttien m\u00e4\u00e4rittely\u00e4, hyv\u00e4ksynt\u00e4\u00e4 ja poistamista, mutta samalla tunnistuspalvelu n\u00e4kee laajasti, mihin palveluihin k\u00e4ytt\u00e4j\u00e4t kirjautuvat. Tietojen minimointi, s\u00e4ilytysajat, k\u00e4ytt\u00f6oikeudet, l\u00e4pin\u00e4kyvyys ja lokien suojaus pit\u00e4\u00e4 siksi suunnitella my\u00f6s tunnistuspalvelun n\u00e4k\u00f6kulmasta.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aed5a0f elementor-widget elementor-widget-heading\" data-id=\"aed5a0f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Kertakirjautumisen riskit<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08cf758 elementor-widget elementor-widget-text-editor\" data-id=\"08cf758\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><b>Tunnistuspalvelusta tulee kriittinen riippuvuus<\/b><\/h3>\n<p class=\"p1\">Kertakirjautuminen keskitt\u00e4\u00e4 monen sovelluksen p\u00e4\u00e4syn samaan tunnistuspalveluun. H\u00e4iri\u00f6 voi est\u00e4\u00e4 uudet kirjautumiset laajasti, vaikka sovellukset itsess\u00e4\u00e4n olisivat toimintakunnossa.<\/p>\n<p class=\"p1\">Kyse ei aina ole yhdest\u00e4 palvelimesta tai yhdest\u00e4 pisteest\u00e4. Todellinen riippuvuusketju voi sis\u00e4lt\u00e4\u00e4 DNS:n, tietokannat, avainpalvelut, tietoliikenteen, pilvialueen, ulkoisen Identity Providerin, MFA-palvelun sek\u00e4 yll\u00e4pit\u00e4jien p\u00e4\u00e4syn. Kahdennettu sovellus ei auta, jos molemmat instanssit k\u00e4ytt\u00e4v\u00e4t samaa rikkoutunutta riippuvuutta.<\/p>\n<p class=\"p1\">Riskin pienent\u00e4minen edellytt\u00e4\u00e4:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">liiketoimintavaikutukseen perustuvia saatavuus- ja palautumistavoitteita<\/li>\n<li class=\"li1\">korkean saatavuuden arkkitehtuuria ilman tarpeettomia yhteisi\u00e4 vikapisteit\u00e4<\/li>\n<li class=\"li1\">kapasiteetti- ja kuormitustestausta<\/li>\n<li class=\"li1\">riippuvuuksien valvontaa ja h\u00e4lytyksi\u00e4<\/li>\n<li class=\"li1\">varmistuksia ja k\u00e4yt\u00e4nn\u00f6ss\u00e4 testattua palautumista<\/li>\n<li class=\"li1\">hallittua yll\u00e4pit\u00e4j\u00e4n p\u00e4\u00e4sy\u00e4 h\u00e4iri\u00f6n aikana<\/li>\n<li class=\"li1\">rajattuja h\u00e4t\u00e4tilej\u00e4 vain nimetyille kriittisille palveluille.<\/li>\n<\/ul>\n<p class=\"p1\">H\u00e4t\u00e4tilin pit\u00e4\u00e4 olla vahvasti suojattu, valvottu ja s\u00e4\u00e4nn\u00f6llisesti testattu. Sen k\u00e4ytt\u00f6 tarkastetaan j\u00e4lkik\u00e4teen. Laaja rinnakkainen paikallinen kirjautumistapa heikent\u00e4\u00e4 keskitetyn mallin hy\u00f6tyj\u00e4 ja voi muuttua huomaamatta valvomattomaksi takaoveksi.<\/p>\n<p class=\"p1\">Lis\u00e4ksi organisaatioiden tulisi kartoittaa eri k\u00e4ytt\u00e4j\u00e4ryhmi\u00e4 ja mahdollisesti ottaa k\u00e4ytt\u00f6\u00f6n useampi kuin yksi todennuksen hallintaymp\u00e4rist\u00f6 riskianalyysin perusteella. Vaadittu turvallisuustaso riippuu arvioidusta riskitasosta.<\/p>\n<h3><b>Yhden vaarantuneen tunnuksen vaikutus voi olla laaja<\/b><\/h3>\n<p class=\"p1\">Kun yksi tili toimii useissa sovelluksissa, sen kaappaaminen kasvattaa hy\u00f6kk\u00e4\u00e4j\u00e4n mahdollista vaikutusaluetta. SSO ei anna k\u00e4ytt\u00e4j\u00e4lle automaattisesti oikeutta kaikkeen, mutta hy\u00f6kk\u00e4\u00e4j\u00e4 voi k\u00e4ytt\u00e4\u00e4 kaikkia niit\u00e4 palveluja, joihin tilill\u00e4 ja sen voimassa olevilla k\u00e4ytt\u00f6oikeuksilla on p\u00e4\u00e4sy.<\/p>\n<p class=\"p1\">Keskitetyn tunnuksen suojaamisessa t\u00e4rkeimpi\u00e4 keinoja ovat:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">tietojenkalastelua kest\u00e4v\u00e4 tunnistautuminen, kuten asianmukaisesti toteutettu WebAuthn<\/li>\n<li class=\"li1\">v\u00e4himm\u00e4n oikeuden periaate ja s\u00e4\u00e4nn\u00f6lliset k\u00e4ytt\u00f6oikeustarkastukset<\/li>\n<li class=\"li1\">erilliset yll\u00e4pitoidentiteetit tavallisesta ty\u00f6tilist\u00e4<\/li>\n<li class=\"li1\">tuore tai vahvempi tunnistautuminen kriittisiin toimintoihin<\/li>\n<li class=\"li1\">tunnistusv\u00e4lineen rekister\u00f6innin ja palautumisen vahva suojaus<\/li>\n<li class=\"li1\">vaarantuneen tilin, laitteen ja istunnon nopea peruminen<\/li>\n<li class=\"li1\">poikkeavan toiminnan valvonta tunnistautumisen j\u00e4lkeen.<\/li>\n<\/ul>\n<p class=\"p1\">K\u00e4ytt\u00e4jien koulutus auttaa tunnistamaan poikkeavia kirjautumispyynt\u00f6j\u00e4, mutta sit\u00e4 ei pid\u00e4 k\u00e4ytt\u00e4\u00e4 ensisijaisena suojauksena. Palvelun teknisen suunnittelun pit\u00e4\u00e4 rajoittaa sit\u00e4, kuinka helposti k\u00e4ytt\u00e4j\u00e4 voidaan huijata luovuttamaan tunnisteensa.<\/p>\n<h3><b>Virheellinen luottamussuhde voi ohittaa hyv\u00e4n tunnistautumisen<\/b><\/h3>\n<p class=\"p1\">Vahva k\u00e4ytt\u00e4j\u00e4n tunnistautuminen ei auta, jos sovellus hyv\u00e4ksyy v\u00e4\u00e4r\u00e4n my\u00f6nt\u00e4j\u00e4n tokenin, j\u00e4tt\u00e4\u00e4 allekirjoituksen tarkistamatta tai sallii hallitsemattoman redirect-osoitteen. Federaation turvallisuus riippuu sek\u00e4 tunnistuspalvelusta ett\u00e4 jokaisen sovelluksen validoinnista.<\/p>\n<p class=\"p1\">Tyypillisi\u00e4 hallittavia riskej\u00e4 ovat:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">v\u00e4\u00e4r\u00e4n issuer- tai audience-arvon hyv\u00e4ksyminen<\/li>\n<li class=\"li1\">puutteellinen allekirjoituksen, nonce-arvon tai tilaparametrin tarkistus<\/li>\n<li class=\"li1\">liian laajat tai dynaamiset redirect-osoitteet<\/li>\n<li class=\"li1\">vanhentuneet, vuotaneet tai kiert\u00e4m\u00e4tt\u00e4 j\u00e4\u00e4neet avaimet ja salaisuudet<\/li>\n<li class=\"li1\">suojaamaton metadata- tai discovery-l\u00e4hde<br \/>virheellinen k\u00e4ytt\u00e4j\u00e4tilien yhdist\u00e4minen s\u00e4hk\u00f6postiosoitteen perusteella<\/li>\n<li class=\"li1\">attribuuttien tai varmuustason erilainen tulkinta eri j\u00e4rjestelmiss\u00e4.<\/li>\n<\/ul>\n<p class=\"p1\">Hyv\u00e4ksytyt protokollaprofiilit, yll\u00e4pidetyt kirjastot, avainten kierto, m\u00e4\u00e4ritysten tarkastus ja negatiiviset testit pienent\u00e4v\u00e4t riski\u00e4. Sovelluksen pit\u00e4\u00e4 hyl\u00e4t\u00e4 virheellinen tai odottamaton vastaus turvallisesti.<\/p>\n<h3><b>SSO ei korjaa liian laajoja k\u00e4ytt\u00f6oikeuksia<\/b><\/h3>\n<p class=\"p1\">Tunnistautuminen vastaa kysymykseen siit\u00e4, kuka k\u00e4ytt\u00e4j\u00e4 on tai mit\u00e4 h\u00e4nest\u00e4 voidaan todentaa. Autorisointi ratkaisee, mit\u00e4 k\u00e4ytt\u00e4j\u00e4 saa tehd\u00e4. SSO keskitt\u00e4\u00e4 ensimm\u00e4ist\u00e4, mutta ei automaattisesti j\u00e4lkimm\u00e4ist\u00e4.<\/p>\n<p class=\"p1\">Jos roolit, ryhm\u00e4t ja paikalliset oikeudet ovat vanhentuneita, keskitetty kirjautuminen voi tehd\u00e4 niiden k\u00e4yt\u00f6st\u00e4 helpompaa ilman, ett\u00e4 oikeudet ovat oikeita. Erityinen riski syntyy, kun k\u00e4ytt\u00e4j\u00e4n teht\u00e4v\u00e4 muuttuu, yhteisty\u00f6suhde p\u00e4\u00e4ttyy tai paikallinen tili j\u00e4\u00e4 sovellukseen aktiiviseksi.<\/p>\n<p class=\"p1\">K\u00e4ytt\u00f6oikeuksien hallinnassa tarvitaan:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">nimetty omistaja jokaiselle roolille ja oikeudelle<br \/>v\u00e4himm\u00e4n oikeuden periaate<\/li>\n<li class=\"li1\">hyv\u00e4ksynt\u00e4 riskin mukaan<\/li>\n<li class=\"li1\">joiner, mover ja leaver -prosessit<\/li>\n<li class=\"li1\">m\u00e4\u00e4r\u00e4aikaisten oikeuksien automaattinen p\u00e4\u00e4ttyminen<\/li>\n<li class=\"li1\">s\u00e4\u00e4nn\u00f6lliset k\u00e4ytt\u00f6oikeustarkastukset<\/li>\n<li class=\"li1\">erillinen hallinta yll\u00e4pit\u00e4j\u00e4- ja palvelutileille.<\/li>\n<\/ul>\n<h3><b>Keskitt\u00e4minen lis\u00e4\u00e4 tietosuoja- ja sis\u00e4piiririski\u00e4<\/b><\/h3>\n<p class=\"p1\">Tunnistuspalvelu tai identiteettiv\u00e4litt\u00e4j\u00e4 k\u00e4sittelee k\u00e4ytt\u00e4j\u00e4tunnisteita, attribuutteja, laite- ja sijaintitietoja sek\u00e4 laajaa kirjautumishistoriaa. T\u00e4m\u00e4 tekee siit\u00e4 kiinnostavan kohteen sek\u00e4 ulkoiselle hy\u00f6kk\u00e4\u00e4j\u00e4lle ett\u00e4 oikeuksia v\u00e4\u00e4rink\u00e4ytt\u00e4v\u00e4lle sis\u00e4piiril\u00e4iselle.<\/p>\n<p class=\"p1\">Tietosuojaa tukevat:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">attribuuttien ja lokitietojen minimointi<\/li>\n<li class=\"li1\">palvelukohtaiset pseudonyymit tunnisteet, kun ne sopivat k\u00e4ytt\u00f6tarkoitukseen<br \/>rajatut yll\u00e4pito- ja lukuoikeudet<\/li>\n<li class=\"li1\">yll\u00e4pitotoimien muuttumaton audit trail<\/li>\n<li class=\"li1\">m\u00e4\u00e4ritellyt s\u00e4ilytysajat ja poistaminen<\/li>\n<li class=\"li1\">tietovirtojen, k\u00e4sittelyperusteiden ja osapuolten vastuiden dokumentointi<\/li>\n<li class=\"li1\">s\u00e4\u00e4nn\u00f6llinen tietosuoja- ja riskiarvio.<\/li>\n<\/ul>\n<h3><b>Toimittajariippuvuus ja osaamisen keskittyminen<\/b><\/h3>\n<p class=\"p1\">SSO-ratkaisu voi sitoa organisaation yhden tuotteen ominaisuuksiin, omiin rajapintoihin tai toimittajan lisenssimalliin. My\u00f6s osaaminen voi keskitty\u00e4 muutamalle henkil\u00f6lle. T\u00e4ll\u00f6in tuote-, hinta- tai henkil\u00f6st\u00f6muutos vaikeuttaa jatkuvuutta.<\/p>\n<p class=\"p1\">Riski\u00e4 voidaan pienent\u00e4\u00e4 suosimalla standardeja, dokumentoimalla arkkitehtuuri ja m\u00e4\u00e4ritykset, automatisoimalla toistettavat teht\u00e4v\u00e4t, yll\u00e4pit\u00e4m\u00e4ll\u00e4 sovellusrekisteri\u00e4 ja suunnittelemalla poistumistapa. Standardi ei poista toimittajariippuvuutta kokonaan, mutta se helpottaa integraatioiden ymm\u00e4rt\u00e4mist\u00e4 ja siirt\u00e4mist\u00e4.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3f9243 elementor-widget elementor-widget-heading\" data-id=\"e3f9243\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">N\u00e4in SSO:n riskit pidet\u00e4\u00e4n hallinnassa<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fccde2a elementor-widget elementor-widget-text-editor\" data-id=\"fccde2a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><b>1. M\u00e4\u00e4rit\u00e4 omistajuus ja riskitaso<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Nime\u00e4 liiketoiminta- ja tekninen omistaja tunnistuspalvelulle, v\u00e4litt\u00e4j\u00e4lle ja jokaiselle liitetylle sovellukselle. Luokittele palvelut sen perusteella, mit\u00e4 v\u00e4\u00e4r\u00e4 p\u00e4\u00e4sy, h\u00e4iri\u00f6 tai tietovuoto aiheuttaisi.<\/span><\/p>\n<h3><b>2. Suojaa tunnistuspalvelu tietojenkalastelua kest\u00e4v\u00e4ll\u00e4 MFA:lla<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Tarjoa tietojenkalastelua kest\u00e4v\u00e4 tunnistautumistapa ja vaadi sit\u00e4 erityisesti yll\u00e4pit\u00e4jilt\u00e4 sek\u00e4 korkean riskin palveluissa. Suojaa my\u00f6s uuden tunnistusv\u00e4lineen rekister\u00f6inti, tilin palautuminen ja tukipalvelun tekem\u00e4t muutokset.<\/span><\/p>\n<h3><b>3. Erota tavallinen ja etuoikeutettu k\u00e4ytt\u00f6<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">\u00c4l\u00e4 k\u00e4yt\u00e4 tavallista ty\u00f6identiteetti\u00e4 kaikkiin yll\u00e4pitoteht\u00e4viin. Rajaa yll\u00e4pitoroolit, k\u00e4yt\u00e4 tarvittaessa m\u00e4\u00e4r\u00e4aikaista korotusta ja vaadi kriittisiin toimintoihin tuore tai vahvempi tunnistautuminen.<\/span><\/p>\n<h3><b>4. Suunnittele elinkaari ja istuntojen peruminen<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Yhdist\u00e4 tunnuksen sulkeminen sovellustilien deprovisiointiin, k\u00e4ytt\u00f6oikeuksien poistamiseen sek\u00e4 istuntojen ja tokenien perumiseen. Testaa prosessi todellisissa sovelluksissa, ei vain tunnistuspalvelussa.<\/span><\/p>\n<h3><b>5. Rakenna korkea saatavuus ja testaa palautuminen<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Tunnista koko riippuvuusketju. M\u00e4\u00e4rit\u00e4 palautumistavoitteet, testaa kuormitus, varmistukset ja katastrofipalautuminen. Pid\u00e4 rajatut h\u00e4t\u00e4tilit toimintakunnossa vain niiss\u00e4 kriittisiss\u00e4 palveluissa, joissa niit\u00e4 aidosti tarvitaan.<\/span><\/p>\n<h3><b>6. K\u00e4yt\u00e4 turvallisia integraatiomalleja<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Hyv\u00e4ksy SAML- ja OIDC-profiilit, rajaa redirect-osoitteet tarkasti, tarkista issuer, audience, allekirjoitus ja transaktion sidonta. Hallitse avaimet, varmenteet, metadata ja salaisuudet koko elinkaaren ajan.<\/span><\/p>\n<h3><b>7. Valvo tunnistautumista ja sovellustoimintaa yhdess\u00e4<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Yhdist\u00e4 tunnistuspalvelun, sovelluksen, k\u00e4ytt\u00f6oikeuksien ja infrastruktuurin tapahtumat. M\u00e4\u00e4rit\u00e4 h\u00e4lytykset, korrelaatiotunnisteet, s\u00e4ilytysajat ja poikkeamien k\u00e4sittely. Harjoittele vaarantuneen tunnuksen ja tunnistuspalvelun h\u00e4iri\u00f6n vaste.<\/span><\/p>\n<h3><b>8. Tarkasta k\u00e4ytt\u00f6oikeudet ja liit\u00e4nn\u00e4t s\u00e4\u00e4nn\u00f6llisesti<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Poista tarpeettomat sovellukset, luottamussuhteet, avaimet, attribuutit ja yll\u00e4pito-oikeudet. Varmista, ett\u00e4 jokainen tuotantoliit\u00e4nt\u00e4 on omistettu, valvottu ja mukana muutoksenhallinnassa.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fe6e7e4 elementor-widget elementor-widget-heading\" data-id=\"fe6e7e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Milloin SSO on organisaatiolle perusteltu?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b44099c elementor-widget elementor-widget-text-editor\" data-id=\"b44099c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Kertakirjautuminen on tavallisesti perusteltu, kun k\u00e4ytt\u00e4jill\u00e4 on useita sovelluksia, organisaatio tarvitsee yhdenmukaisia tunnistautumisvaatimuksia tai k\u00e4ytt\u00e4j\u00e4tilien hajautettu hallinta aiheuttaa selke\u00e4\u00e4 riski\u00e4 ja ty\u00f6t\u00e4.<\/p>\n<p class=\"p1\">P\u00e4\u00e4t\u00f6st\u00e4 voi arvioida seuraavilla kysymyksill\u00e4:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">Kuinka monta sovellusta ja k\u00e4ytt\u00e4j\u00e4ryhm\u00e4\u00e4 ratkaisu palvelee?<\/li>\n<li class=\"li1\">Mitk\u00e4 palvelut ovat liiketoimintakriittisi\u00e4?<\/li>\n<li class=\"li1\">Mit\u00e4 tunnistautumisen varmuutta eri palvelut tarvitsevat?<\/li>\n<li class=\"li1\">Tukeeko sovellus turvallista SAML- tai OIDC-liit\u00e4nt\u00e4\u00e4?<\/li>\n<li class=\"li1\">Miten k\u00e4ytt\u00f6oikeudet, tilit, istunnot ja tokenit poistetaan?<\/li>\n<li class=\"li1\">Miten tunnistuspalvelun h\u00e4iri\u00f6st\u00e4 palaudutaan?<\/li>\n<li class=\"li1\">Mitk\u00e4 palvelut tarvitsevat rajatun h\u00e4t\u00e4k\u00e4yt\u00f6n?<\/li>\n<li class=\"li1\">Miten kirjautumista, k\u00e4ytt\u00f6oikeuksia ja sovellustoimintaa valvotaan?<\/li>\n<li class=\"li1\">Kuka omistaa palvelun, integraatiot ja hyv\u00e4ksytt\u00e4v\u00e4n j\u00e4\u00e4nn\u00f6sriskin?<\/li>\n<li class=\"li1\">Mill\u00e4 mittareilla hy\u00f6ty ja turvallisuus osoitetaan?<\/li>\n<\/ul>\n<p class=\"p1\">SSO:n liiketoimintahy\u00f6ty\u00e4 ei pid\u00e4 perustella yleisill\u00e4 prosenttiluvuilla ilman omaa l\u00e4ht\u00f6tietoa. Ennen ja j\u00e4lkeen k\u00e4ytt\u00f6\u00f6noton voidaan mitata nollauspyynt\u00f6j\u00e4, kirjautumisaikaa, sovelluksen liitt\u00e4miseen kuluvaa aikaa, ep\u00e4onnistumisia, palautumiskyky\u00e4 ja tunnistamiseen liittyvi\u00e4 poikkeamia.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e936f0 elementor-widget elementor-widget-heading\" data-id=\"2e936f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Usein kysytyt kysymykset<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6cc1b2d elementor-widget elementor-widget-text-editor\" data-id=\"6cc1b2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><b>Onko kertakirjautuminen turvallinen?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Kyll\u00e4, kun se suunnitellaan ja yll\u00e4pidet\u00e4\u00e4n hyvin. SSO voi parantaa turvallisuutta keskitt\u00e4m\u00e4ll\u00e4 vahvan tunnistautumisen, politiikat ja valvonnan. Samalla se keskitt\u00e4\u00e4 saatavuus- ja tilikaappausriski\u00e4, joten MFA, v\u00e4himm\u00e4t oikeudet, istuntojen hallinta, valvonta ja palautuminen ovat olennaisia.<\/span><\/p>\n<h3><b>Onko yksi tunnus kaikkiin palveluihin liian suuri riski?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Yksi identiteetti voi toimia useissa palveluissa ilman, ett\u00e4 k\u00e4ytt\u00e4j\u00e4ll\u00e4 on oikeus kaikkeen. Riskin laajuuden ratkaisevat k\u00e4ytt\u00f6oikeudet, tunnistautumisen vahvuus, istunnot ja valvonta. Yll\u00e4pitoidentiteetit ja kriittiset oikeudet kannattaa erottaa tavallisesta ty\u00f6tilist\u00e4.<\/span><\/p>\n<h3><b>Poistaako SSO salasanat?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Ei automaattisesti. SSO v\u00e4hent\u00e4\u00e4 sovelluskohtaisia salasanoja. Keskitetty tunnistautuminen voi edelleen k\u00e4ytt\u00e4\u00e4 salasanaa, tai se voidaan toteuttaa salasanattomalla WebAuthn- tai passkey-menetelm\u00e4ll\u00e4.<\/span><\/p>\n<h3><b>Pit\u00e4\u00e4k\u00f6 salasanat vaihtaa s\u00e4\u00e4nn\u00f6llisesti?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Ei mielivaltaisen aikataulun perusteella. Nykyinen NIST-ohjeistus kielt\u00e4\u00e4 m\u00e4\u00e4r\u00e4aikaisen vaihdon vaatimisen ja edellytt\u00e4\u00e4 vaihtoa, kun tunnisteen vaarantumisesta on n\u00e4ytt\u00f6\u00e4. Salasanojen pituus, vaarantuneiden arvojen esto ja turvallinen palautuminen ovat t\u00e4rke\u00e4mpi\u00e4.<\/span><\/p>\n<h3><b>Onko MFA:ssa aina kolme tunnistustekij\u00e4\u00e4?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Ei. MFA tarkoittaa v\u00e4hint\u00e4\u00e4n kahta eri tekij\u00e4luokkaa. Salasana ja hallussa oleva turva-avain ovat kaksi tekij\u00e4\u00e4. Tietojenkalastelua kest\u00e4v\u00e4 MFA on t\u00e4rke\u00e4mpi tavoite kuin vaiheiden lukum\u00e4\u00e4r\u00e4n kasvattaminen ilman riskiarviota.<\/span><\/p>\n<h3><b>Est\u00e4\u00e4k\u00f6 tunnuksen sulkeminen p\u00e4\u00e4syn heti kaikkialle?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Ei v\u00e4ltt\u00e4m\u00e4tt\u00e4. Se est\u00e4\u00e4 tavallisesti uuden federoidun kirjautumisen, mutta olemassa oleva sovellusistunto, refresh token tai paikallinen tunniste voi s\u00e4ily\u00e4. Deprovisiointi ja istuntojen peruminen pit\u00e4\u00e4 toteuttaa ja testata erikseen.<\/span><\/p>\n<h3><b>Onko SSO sama asia kuin k\u00e4ytt\u00f6oikeuksien hallinta?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Ei. SSO todentaa k\u00e4ytt\u00e4j\u00e4n ja v\u00e4litt\u00e4\u00e4 sovellukselle tunnistamisen tuloksen. Sovellus tai erillinen k\u00e4ytt\u00f6oikeusratkaisu p\u00e4\u00e4tt\u00e4\u00e4, mit\u00e4 k\u00e4ytt\u00e4j\u00e4 saa tehd\u00e4.<\/span><\/p>\n<h3><b>Mit\u00e4 tapahtuu, jos tunnistuspalvelu ei toimi?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Uudet kirjautumiset voivat esty\u00e4 useissa sovelluksissa. Olemassa olevat sovellusistunnot voivat jatkua niiden omien s\u00e4\u00e4nt\u00f6jen mukaan. Organisaatio tarvitsee korkean saatavuuden, testatun palautumisen ja rajatun h\u00e4t\u00e4k\u00e4yt\u00f6n suunnitelman kriittisille palveluille.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0244d67 elementor-widget elementor-widget-heading\" data-id=\"0244d67\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Yhteenveto<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7a16ec2 elementor-widget elementor-widget-text-editor\" data-id=\"7a16ec2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Kertakirjautumisen suurin vahvuus on sama kuin sen keskeinen riski: tunnistautuminen keskitet\u00e4\u00e4n. Keskitt\u00e4minen v\u00e4hent\u00e4\u00e4 sovelluskohtaisia salasanoja, yhdenmukaistaa politiikkoja, parantaa k\u00e4ytt\u00f6kokemusta ja mahdollistaa paremman n\u00e4kyvyyden. Samalla tunnistuspalvelusta tulee kriittinen riippuvuus ja vaarantuneen tilin vaikutus voi laajentua.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Turvallinen SSO ei p\u00e4\u00e4ty onnistuneeseen kirjautumiseen. Se tarvitsee tietojenkalastelua kest\u00e4v\u00e4n tunnistautumisen, hallitut k\u00e4ytt\u00f6oikeudet, erilliset yll\u00e4pitoidentiteetit, toimivan k\u00e4ytt\u00e4j\u00e4tilien elinkaaren, istuntojen perumisen, turvalliset federaatioliit\u00e4nn\u00e4t, korkean saatavuuden, valvonnan ja harjoitellun palautumisen.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Kun n\u00e4m\u00e4 osa-alueet suunnitellaan kokonaisuutena, SSO voi v\u00e4hent\u00e4\u00e4 sek\u00e4 k\u00e4ytt\u00e4jien kitkaa ett\u00e4 organisaation tietoturvariski\u00e4.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Tarvitsetko apua kertakirjautumisen, identiteetinhallinnan tai turvallisten SAML- ja OIDC-liit\u00e4nt\u00f6jen suunnittelussa? Tutustu WeAren<\/span><a href=\"https:\/\/weare.fi\/palvelut\/identiteetin-ja-paasynhallinta-iam\/\"> <span style=\"font-weight: 400;\">identiteetin- ja p\u00e4\u00e4synhallinnan palveluihin<\/span><\/a><span style=\"font-weight: 400;\"> tai ota yhteytt\u00e4 asiantuntijoihimme.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2466217 elementor-widget elementor-widget-text-editor\" data-id=\"2466217\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><b>Kertakirjautumisen artikkelisarja<\/b><\/h3>\n<ul>\n<li><span style=\"font-weight: 400;\">Mit\u00e4 kertakirjautuminen eli SSO tarkoittaa ja miten se toimii?<\/span><\/li>\n<li><span style=\"font-weight: 400;\">SAML 2.0 vs OpenID Connect: SSO-protokollat ja WebAuthnin rooli<\/span><\/li>\n<li><span style=\"font-weight: 400;\">Federoitu kirjautuminen ja SSO-hallintamalli<\/span><\/li>\n<li><span style=\"font-weight: 400;\">Kertakirjautumisen hy\u00f6dyt ja riskit<\/span><\/li>\n<\/ul>\n<h3><b>L\u00e4hteet ja standardit<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/eidas-regulation\"><span style=\"font-weight: 400;\">Regulation (EU) 2024\/1183 (eIDAS 2.0)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022L2555\"><span style=\"font-weight: 400;\">Directive (EU) 2022\/2555 (NIS2 Directive)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2022\/2554\/oj\/eng\"><span style=\"font-weight: 400;\">Regulation (EU) 2022\/2554 (Digital Operational Resilience Act &#8211; DORA)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.europarl.europa.eu\/news\/pl\/press-room\/20251121IPR31540\/payment-services-deal-more-protection-from-online-fraud-and-hidden-fees\"><span style=\"font-weight: 400;\">Payment Services Regulation (PSR)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.europarl.europa.eu\/news\/pl\/press-room\/20251121IPR31540\/payment-services-deal-more-protection-from-online-fraud-and-hidden-fees\"><span style=\"font-weight: 400;\">Payment Services Directive 3 (PSD3)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.finlex.fi\/en\/legislation\/translations\/2009\/eng\/617\"><span style=\"font-weight: 400;\">Finnish Act on Strong Electronic Identification and Electronic Trust Services (617\/2009)<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/MFA\"><span style=\"font-weight: 400;\">CISA, More than a Password<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.w3.org\/TR\/webauthn-3\/\"><span style=\"font-weight: 400;\">W3C, Web Authentication: An API for accessing Public Key Credentials, Level 3<\/span><\/a><\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d5e7200 elementor-share-buttons--skin-flat elementor-share-buttons--color-custom elementor-share-buttons--view-icon-text elementor-share-buttons--shape-square elementor-grid-0 elementor-widget elementor-widget-share-buttons\" data-id=\"d5e7200\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_facebook\" role=\"button\" tabindex=\"0\" aria-label=\"Share on facebook\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-facebook\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tFacebook\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_twitter\" role=\"button\" tabindex=\"0\" aria-label=\"Share on twitter\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-twitter\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tTwitter\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" role=\"button\" tabindex=\"0\" aria-label=\"Share on linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tLinkedIn\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c4d486 elementor-widget elementor-widget-spacer\" data-id=\"2c4d486\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6cc0d761 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6cc0d761\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4f28b13d\" data-id=\"4f28b13d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-885b1d1 elementor-widget elementor-widget-spacer\" data-id=\"885b1d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6334508 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6334508\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-24b81a6\" data-id=\"24b81a6\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Artikkelisarjan viimeisess\u00e4 osassa keskityt\u00e4\u00e4n kertakirjautumisen ja federoidun kirjautumisen hy\u00f6tyihin ja haittoihin.<\/p>","protected":false},"author":2,"featured_media":1381,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"site-sidebar-layout":"right-sidebar","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[20,75],"tags":[],"blog":[123],"customer-cases":[],"class_list":["post-27509","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iam","category-ohjelmistokehitys-artikkelit","blog-identity-and-access-management"],"_links":{"self":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/comments?post=27509"}],"version-history":[{"count":14,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509\/revisions"}],"predecessor-version":[{"id":27523,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/posts\/27509\/revisions\/27523"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/media\/1381"}],"wp:attachment":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/media?parent=27509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/categories?post=27509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/tags?post=27509"},{"taxonomy":"blog","embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/blog?post=27509"},{"taxonomy":"customer-cases","embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/customer-cases?post=27509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}