AI Summary

Single sign‑on (SSO) lets users access multiple systems with one credential set, but the convenience can concentrate risk. In 2025, attackers breached a University of Pennsylvania PennKey SSO account and used it to reach internal systems such as VPN, Salesforce, Qlik, SAP, and SharePoint. The intrusion led to the theft of data on 1.2 million individuals. The incident highlights the need to evaluate SSO security against modern credential‑attack techniques.

AI summaries can be wrong sometimes—always verify important details using the source article.