Single sign-on is a technology by which once you sign in to one IIT Bombay server using your IITB LDAP credentials, then you will not have to sign in repeatedly to other servers which validate you using the same LDAP credentials.
While SSO is meant for various IIT Bombay servers, the initial roll out is in the context IIT Bombay subscribing to GSuite for Education and Microsoft MS Academic Azure for all IIT Bombay users. Both GSuite and MS Academic Azure will work only with SSO and hence it is critical that everyone enables Single Sign-On. See below to know why we need GSuite.
See the explanation on CC Website /CC Services/ Single Sign-on (SSO) Service for further technical explanation on why it is useful, and how to enable "2FA" for it (see below also).
In the coming online semester, IIT Bombay is going to need large amount of resources of storage, and video conferencing solutions. G Suite and MS Academic Azure together offer a combination of products that will prove very useful. E.g. all G Suite users get 1 TB storage on Google Drive, and MS Teams can be used for Video conferencing and other streamlined communication.
Single Sign-On comes with 'two factor authentication (2FA)'. That is for logging in you need to not only enter your IITB LDAP username and password, but also enter an OTP. This OTP can be sent to you in two ways:
To an 'Authenticator App' on your smartphone. Follow instructions on the CC Website to get this working.
As an SMS to your phone (this is still not fully working, watch CC website and this space for updates).
See the explanation on CC Website /CC Services/ Single Sign-on (SSO) Service for a technical explanation. of why 2FA is necessary.
However, if you do not want the security two devices give you, or you do not have two reliably working devices the OTP can also be sent to
An 'Authenticator' App that can be installed as a Chrome app or a Firefox. Add-On. Note that the security of these apps themselves is not known to us. Also we do not recommend this route, as it compromises the security that 2FA gives you.