What Is a Password Manager?
Mix (18 tools)
- License: 9 open source · 9 proprietary
- Hosting: 9 self-hosted · 8 SaaS · 1 both
A password manager is a tool that securely stores, generates, organizes, and shares passwords, credentials, and other sensitive data. Enterprise password managers extend beyond personal password vaults to provide:
- Encrypted vaults – zero-knowledge architecture where only the user’s master password (or key) can decrypt stored credentials; the service operator cannot access vault contents
- Password generation – cryptographically random passwords with configurable length, complexity, and character sets
- Secure sharing – share credentials with individuals or groups without revealing the plaintext password; shared folders and collections for team access
- Multi-factor authentication – TOTP, WebAuthn /FIDO2, hardware keys (YubiKey), and biometric second factors for vault access
- Breach monitoring – checks stored passwords against known breach databases (Have I Been Pwned); alerts for compromised, reused, or weak passwords
- Audit logs – track who accessed which credentials, when, and from where; compliance reporting for SOC 2, ISO 27001, HIPAA
- Password policies – enforce minimum length, complexity, rotation schedules, and MFA requirements across the organization
- Browser extensions – auto-fill credentials in web forms; detect new logins and offer to save them; detect password changes and update stored entries
- Mobile apps – iOS and Android native apps with biometric unlock and auto-fill integration (iOS AutoFill, Android Autofill Framework)
- CLI access – command-line tools for scripting, automation, and developer workflows; retrieve secrets programmatically
- Secrets management – some password managers extend into infrastructure secrets (API keys, certificates, SSH keys, environment variables)
Password managers are a critical security tool for any organization. Weak, reused, or compromised passwords remain the leading cause of data breaches. A team password manager eliminates password reuse, enables secure credential sharing, and provides audit visibility into credential access.
About this data & disclaimer
The information on these pages was researched by a combination of human review and large language models. This catalogue serves as a reference for the resources, applications, devices, deployment payloads, and other components that the ResorsIT platform integrates, deploys, and manages. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. This information is compiled on a best-effort basis: it may be incomplete, contain errors, and become out of date as tools, vendors, licences, and features change. Use this catalogue only as a starting point for your own research, and independently verify and review any tool carefully against your own requirements before relying on it.
Comparison
SSO / OIDC Comparison
OIDC is the preferred SSO protocol. The table notes each tool’s behaviour with Authentik as the IdP.
| Tool | OIDC | SAML | SCIM | Authentik Notes |
|---|---|---|---|---|
| Bitwarden | Yes | Yes | Yes | OIDC/SAML via organization SSO; requires Key Connector for SSO without master password; SCIM for directory sync |
| Vaultwarden | Yes* | No | No | OIDC via OpenID Connect plugin (experimental); no SAML or SCIM; community-maintained |
| Passbolt | No | No | No | No SSO in Community Edition; SSO (OIDC, SAML, AD) in Pro/Cloud editions only |
| Psono | Yes | Yes | No | Native OIDC and SAML support; configurable identity providers; works with Authentik |
| KeePassXC | N/A | N/A | N/A | Desktop application; no web-based SSO; authentication is local database file + key file |
| Padloc | No | No | No | No SSO support; email-based authentication only |
| Teampass | No | No | Yes* | LDAP only; no OIDC or SAML; limited SCIM-like directory sync |
| sysPass | No | No | No | LDAP authentication only; no OIDC or SAML |
| Pleasant | Yes | Yes | No | OIDC and SAML via Active Directory Federation Services or third-party IdPs |
| ManageEngine PMP | No | Yes | No | SAML SSO; AD/LDAP integration; no native OIDC |
| 1Password | Yes | Yes | Yes | OIDC via Unlock with SSO (OIDC); SAML for enterprise; SCIM directory sync; Authentik as IdP |
| LastPass | Yes* | Yes | Yes | Federated login (SAML/OIDC) for enterprise; SCIM/AD sync; requires LastPass Identity add-on for full SSO |
| Dashlane | Yes | Yes | Yes | Confidential SSO (OIDC); SAML enterprise SSO; SCIM directory sync; Authentik as IdP |
| Keeper | Yes | Yes | Yes | SSO Connect Cloud (SAML/OIDC); SCIM automated provisioning; AD Bridge for on-prem sync |
| NordPass | Yes | Yes | Yes | OIDC and SAML for Business/Enterprise; SCIM for directory sync via Azure AD, Okta, or custom |
| Zoho Vault | Yes* | Yes | No | Zoho’s own OIDC; SAML for external IdPs; directory sync via AD/LDAP; Authentik as SAML IdP |
| Proton Pass | No | No | No | No SSO support; Proton account authentication only; single identity model |
| RoboForm | No | Yes | Yes | SAML SSO for enterprise; SCIM directory sync; no native OIDC |
* = requires specific configuration, add-on, or enterprise plan
Best SSO support: Bitwarden (OIDC, SAML, SCIM), 1Password (OIDC, SAML, SCIM), Keeper (OIDC, SAML, SCIM), Dashlane (OIDC, SAML, SCIM)
No SSO: Padloc, Proton Pass (Proton account only), sysPass (LDAP only)
API Comparison
| Tool | API Type | Auth | Webhooks | SDKs |
|---|---|---|---|---|
| Bitwarden | REST | OAuth2, API key | Yes (event logs) | CLI, Go, JS, Python (community) |
| Vaultwarden | REST (Bitwarden-compatible) | OAuth2, API key | Yes (via Bitwarden API) | CLI (Bitwarden CLI), community |
| Passbolt | REST | GPG-signed auth | Yes (email notifications) | PHP, JS (community) |
| Psono | REST | Token, API key | No | Python (community) |
| KeePassXC | CLI, D-Bus | N/A (local) | No | KeePassXC-Browser protocol |
| Padloc | REST (limited) | Token | No | None |
| Teampass | REST | API key | No | None |
| sysPass | REST | Token | No | None |
| Pleasant | REST | API key, Windows Auth | Yes (event triggers) | PowerShell |
| ManageEngine PMP | REST | Token, OAuth2 | Yes (syslog, SIEM) | Java |
| 1Password | REST (Connect) | Token, service account | Yes (event API) | Go, JS, Python, CLI |
| LastPass | REST (limited) | OAuth2, API key | Yes (SIEM events) | PowerShell, Python (community) |
| Dashlane | REST (limited) | OAuth2 | Yes (SIEM events) | CLI |
| Keeper | REST | OAuth2, API key | Yes (SIEM events, webhooks) | Python, JS, Java, .NET, CLI |
| NordPass | REST (limited) | OAuth2 | Yes (activity logs) | None official |
| Zoho Vault | REST | OAuth2 | Yes (webhooks) | Java, Python, PHP (Zoho SDKs) |
| Proton Pass | REST (limited) | Proton session | No | None official (GPLv3 clients) |
| RoboForm | REST (limited) | API key | No | None official |
Security Audit History
| Tool | Auditor(s) | Last Audit | Key Findings | Published |
|---|---|---|---|---|
| Bitwarden | Cure53 | Annual (latest 2024) | Clean – no critical issues; minor/low findings resolved | Yes (full reports) |
| Vaultwarden | ERNW + BSI | 2024 | Auth bypass found and fixed; not covered by Bitwarden audits | Yes (BSI report) |
| Passbolt | Cure53 | 2021, 2023, 2025 | Clean – GPG-based model validated; minor findings | Yes (full reports) |
| Psono | Cure53, X41 D-Sec, Trovent | Multiple (2019-2023) | Clean – no critical findings across multiple audits | Yes (summaries) |
| KeePassXC | None formal | N/A | No formal third-party audit; community-reviewed; minor CVEs (clipboard, browser integration) | N/A |
| Padloc | Radically Open Security | 2022 | Clean – no critical findings; minor issues resolved | Yes (full report) |
| Teampass | None recent | 2017 (last known) | AVOID: multiple unaudited CVEs since; SQL injection, XSS, file upload vulnerabilities | N/A |
| sysPass | None | N/A | No known third-party audit; unknown security posture | N/A |
| Pleasant | Not published | Unknown | Proprietary; no published audit reports | No |
| ManageEngine PMP | Not published | Unknown | Proprietary; SOC 2 Type II certified | No |
| 1Password | ISE, Secfault | Annual | Clean – SRP protocol validated; no critical findings; zero-knowledge verified | Yes (summaries) |
| LastPass | Undisclosed | Pre-2022 | Audit history irrelevant – catastrophic 2022 breach demonstrated systemic security failures | Unknown |
| Dashlane | Undisclosed | Annual | SOC 2 Type II; no published pentest reports; clean track record | No |
| Keeper | NCC Group | Quarterly | Clean – FedRAMP High authorized; FIPS 140-2 validated; strongest commercial audit cadence | Yes (summaries) |
| NordPass | Cure53 | 2020 | Clean – zero-knowledge architecture verified; SOC 2 Type II certified | Yes (summary) |
| Zoho Vault | Undisclosed | Annual | SOC 2, ISO 27001 certified; no published pentest reports | No |
| Proton Pass | Cure53 | 2023 | Clean – end-to-end encryption verified; minor findings resolved | Yes (full report) |
| RoboForm | Secfault | 2023 | Clean – no critical findings; AES-256 implementation verified | Yes (summary) |
Security Incidents
| Tool | Notable Incidents | Severity | Status |
|---|---|---|---|
| Bitwarden | No breaches; 2023 auto-fill phishing vector (by design, documented); SOC 2 Type II | None | Clean |
| Vaultwarden | 2024 ERNW audit found auth bypass (fixed in 1.32.0); community project with smaller attack surface review | Medium | Fixed |
| Passbolt | No breaches; no critical CVEs | None | Clean |
| Psono | No breaches; no critical CVEs | None | Clean |
| KeePassXC | No breaches; minor CVEs (CVE-2023-35866 clipboard; CVE-2023-32784 memory dump – KeePass, not XC) | Low | Mitigated |
| Padloc | No breaches; no known CVEs | None | Clean |
| Teampass | AVOID: CVE-2023-1545 (SQL injection), CVE-2023-2591 (stored XSS), CVE-2023-4290 (arbitrary file upload), CVE-2022-27773 (access control bypass), many more dating back years | Critical | Ongoing risk |
| sysPass | No public breaches; CVE-2023-3953 (XSS); limited security visibility | Unknown | Unknown |
| Pleasant | No public breaches; proprietary – limited visibility | Unknown | Unknown |
| ManageEngine PMP | CVE-2022-35405 (RCE – CISA KEV listed); CVE-2023-35785 (auth bypass); requires patching vigilance | High | Patched |
| 1Password | No breaches; 2023 Okta incident (limited to support system, no vault access); strong response | None (vault) | Clean |
| LastPass | CATASTROPHIC 2022 breach: encrypted vaults + metadata stolen; DevOps engineer home PC compromised; $438M+ crypto stolen from cracked vaults through 2025; $150M Ripple heist (2024); $24.5M class-action settlement (2025). Earlier: 2015 breach, 2021 credential stuffing | Critical | AVOID |
| Dashlane | 2022 marketing database exposure (no vault data); no vault breach | Low | Clean |
| Keeper | No breaches; no critical CVEs; never breached; strongest clean record among commercial tools | None | Clean |
| NordPass | No breaches; parent company Nord Security had 2019 server incident (NordVPN, not NordPass) | None (NordPass) | Clean |
| Zoho Vault | No breaches; Zoho platform phishing incidents (2020) did not affect Vault service | None (Vault) | Clean |
| Proton Pass | No breaches; Proton Mail phishing campaigns (not Pass-specific) | None (Pass) | Clean |
| RoboForm | No breaches; 2024 researcher demonstrated historical key derivation weakness (pre-2015 versions) – modern versions unaffected | None (current) | Clean |
Password Management Features
| Tool | Encryption | Sharing | MFA | Breach Monitor | Policies | Browser Ext | Mobile | CLI | Secrets Mgmt | Passkeys |
|---|---|---|---|---|---|---|---|---|---|---|
| Bitwarden | AES-256 + Argon2id | Collections, orgs | TOTP, FIDO2, Duo | Yes (vault health) | Yes (enterprise) | All major | iOS, Android | Yes | Yes (Secrets Manager) | Yes (store + use) |
| Vaultwarden | AES-256 + Argon2id | Collections, orgs | TOTP, FIDO2 | Yes (vault health) | Limited | All major | iOS, Android | Yes (BW CLI) | No | Yes (store + use) |
| Passbolt | OpenPGP (RSA/ECC) | Folders, groups | TOTP, FIDO2 | No | Yes (Pro) | Chrome, Firefox | Mobile web | Yes | No | No |
| Psono | NaCl (Curve25519 + XSalsa20) | Folders, groups | TOTP, FIDO2, Duo | No | Yes | Chrome, Firefox | Android | Yes | Yes (env variables) | No |
| KeePassXC | AES-256 / ChaCha20 + Argon2id | File-based sharing | Key file, YubiKey | Yes (HIBP check) | N/A (local) | KeePassXC-Browser | Via KeePass2Android / Strongbox | CLI built-in | No | No |
| Padloc | AES-256 + PBKDF2/Argon2 | Vaults, groups | TOTP | No | No | Chrome, Firefox, Safari | iOS, Android | No | No | No |
| Teampass | AES-256 + Defuse | Folders, roles | TOTP, Duo | No | Yes | No (web only) | No | No | No | No |
| sysPass | AES-256 + PBKDF2 | Categories, profiles | TOTP | No | Limited | No (web only) | No | No | No | No |
| Pleasant | AES-256 | Folders, roles | TOTP, RADIUS | No | Yes | Chrome, Firefox | iOS, Android | PowerShell | No | No |
| ManageEngine PMP | AES-256 + FIPS 140-2 | Resource groups, roles | TOTP, RADIUS, smart card | No | Yes (extensive) | Chrome, Firefox | iOS, Android | CLI, API | Yes (service accounts) | No |
| 1Password | AES-256 + SRP + Secret Key | Vaults, groups | TOTP, FIDO2, Duo | Yes (Watchtower) | Yes (business) | All major | iOS, Android | Yes | Yes (service accounts) | Yes (store + use) |
| LastPass | AES-256 + PBKDF2 | Folders, sharing center | TOTP, FIDO2, Duo | Yes (dark web monitor) | Yes (enterprise) | All major | iOS, Android | Yes (legacy) | No | Yes (limited) |
| Dashlane | AES-256 + Argon2d | Groups, sharing | TOTP, FIDO2 | Yes (dark web monitor) | Yes (business) | All major | iOS, Android | Yes | Yes (Secrets) | Yes (store + use) |
| Keeper | AES-256 + PBKDF2/Argon2 | Shared folders, roles | TOTP, FIDO2, Duo, RSA | Yes (BreachWatch) | Yes (extensive) | All major | iOS, Android | Yes (Commander) | Yes (Secrets Manager) | Yes (store + use) |
| NordPass | XChaCha20 + Argon2id | Folders, groups | TOTP, FIDO2 | Yes (Data Breach Scanner) | Yes (business) | All major | iOS, Android | No | No | Yes (store + use) |
| Zoho Vault | AES-256 + PBKDF2 | Chambers, groups | TOTP, YubiKey | No | Yes (enterprise) | All major | iOS, Android | CLI | No | No |
| Proton Pass | AES-256 + Argon2 (via SRP) | Vaults sharing | TOTP (built-in) | Yes (Pass Monitor) | Limited | Chrome, Firefox, Brave, Edge | iOS, Android | pass CLI | No | Yes (store + use) |
| RoboForm | AES-256 + PBKDF2 | Shared folders, groups | TOTP, FIDO2 | Yes (Security Center) | Yes (business) | All major | iOS, Android | No | No | Yes (limited) |
Deployment and Licensing
| Tool | License | Self-Hosted | Database | Pricing Model |
|---|---|---|---|---|
| Bitwarden | AGPL-3.0 (server) / GPL-3.0 (clients) | Yes (Docker) | MSSQL, PostgreSQL, MySQL | Free (2 users); Premium $10/yr; Families $40/yr; Teams $4/user/mo; Enterprise $6/user/mo |
| Vaultwarden | AGPL-3.0 | Yes (Docker) | SQLite, PostgreSQL, MySQL | Free (open source); community-maintained |
| Passbolt | AGPL-3.0 | Yes (Docker, deb, rpm) | MySQL/MariaDB | Free (CE); Pro EUR 49/user/yr; Cloud EUR 54/user/yr |
| Psono | Apache 2.0 | Yes (Docker) | PostgreSQL | Free (OSS); Enterprise on request |
| KeePassXC | GPL-2.0+ | N/A (desktop app) | Local KDBX file | Free (open source) |
| Padloc | AGPL-3.0 | Yes (Docker) | LevelDB, PostgreSQL | Free (OSS); Premium $3/user/mo (SaaS) |
| Teampass | GPL-3.0 | Yes (LAMP) | MySQL/MariaDB | Free (open source) |
| sysPass | GPL-3.0 | Yes (Docker, LAMP) | MySQL/MariaDB | Free (open source) |
| Pleasant | Proprietary | Yes (Windows/.NET) | SQL Server | From $500/server + per-user licenses |
| ManageEngine PMP | Proprietary | Yes (Windows, Linux) | PostgreSQL, MSSQL | Free (5 users); Standard from $595/yr; Enterprise from $3,995/yr |
| 1Password | Proprietary SaaS | No | Managed cloud | Individual $2.99/mo; Families $4.99/mo; Teams $19.95/mo (10 users); Business $7.99/user/mo |
| LastPass | Proprietary SaaS | No | Managed cloud | Free (1 device type); Premium $3/mo; Families $4/mo; Teams $4/user/mo; Business $7/user/mo |
| Dashlane | Proprietary SaaS | No | Managed cloud | Free (25 passwords); Premium $4.99/mo; Business $8/user/mo |
| Keeper | Proprietary SaaS | No | Managed cloud | Personal $2.92/mo; Family $6.25/mo; Business $3.75/user/mo; Enterprise on request |
| NordPass | Proprietary SaaS | No | Managed cloud | Free (1 device); Premium $1.49/mo; Business $3.99/user/mo; Enterprise $5.99/user/mo |
| Zoho Vault | Proprietary SaaS | No | Managed cloud | Free (1 user); Standard $1/user/mo; Professional $4/user/mo; Enterprise $7/user/mo |
| Proton Pass | Proprietary SaaS (GPLv3 clients) | No | Managed cloud (Swiss) | Free; Pass Plus $1.99/mo; Proton Unlimited $9.99/mo (bundle); Business $6.99/user/mo |
| RoboForm | Proprietary SaaS | No | Managed cloud | Free (1 device); Premium $2.49/mo; Business $3.99/user/mo |
Tools
18 tools.
1Password
1Password is a leading commercial password manager developed by AgileBits Inc. (Toronto, Canada). It provides password storage, secure notes, document storage, and identity management across all major platforms.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC, SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Provisioned account
Bitwarden
Bitwarden is the most widely deployed open-source password manager, used by millions of individuals and thousands of organizations worldwide.
License: AGPL-3.0-only (OSS) · Kind: web · Deploy: direct, docker · SSO: OIDC, SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Provisioned account
Dashlane
Dashlane is a commercial cloud password manager using AES-256 encryption with Argon2d and a zero-knowledge model, offering vault storage, passkeys, dark web monitoring, and patented Confidential SSO.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Provisioned account
KeePassXC
KeePassXC is a community-driven cross-platform fork of KeePassX, which itself is a port of the original KeePass Password Safe for Windows.
License: GPL-2.0-only (OSS) · Kind: web · Deploy: saas, docker, direct, package · SSO: OIDC
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on
Keeper
Keeper Security is a commercial password manager and privileged access management (PAM) platform founded in 2011 (Chicago, USA).
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Provisioned account
LastPass
LastPass is a commercial password manager originally developed by Marvasol Inc. and later acquired by LogMeIn (2015), then spun off as an independent company (2021).
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC, SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Provisioned account
ManageEngine Password Manager Pro
ManageEngine Password Manager Pro (PMP) is an enterprise privileged access management (PAM) and password management solution developed by Zoho Corporation’s ManageEngine division.
License: Proprietary (proprietary) · Kind: web · Deploy: direct · SSO: OIDC, SAML
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on
NordPass
NordPass is a commercial password manager developed by Nord Security, the parent company of NordVPN.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC, SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on
Padloc
Padloc is a minimalist, open-source password manager with web, desktop, and mobile clients, using client-side AES-256 encryption, shared vaults, TOTP, and organization management.
License: AGPL-3.0-only (OSS) · Kind: web · Deploy: direct, docker · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Passbolt
Passbolt is an open-source password manager for teams that encrypts each secret per- recipient using OpenPGP key pairs, so the server never holds plaintext credentials; self-hosted or cloud-hosted.
License: AGPL-3.0-only (OSS) · Kind: web · Deploy: direct, docker · SSO: OIDC
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on
Pleasant Password Server
Pleasant Password Server is a Windows-based enterprise password management solution built on .NET and SQL Server.
License: Proprietary (proprietary) · Kind: web · Deploy: direct · SSO: OIDC, SAML
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on
Proton Pass
Proton Pass is a password manager developed by Proton AG, the Swiss company behind Proton Mail, Proton VPN, and Proton Drive. Launched in 2023, it is the newest product in Proton’s privacy-focused suite.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: saas · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Vaulted credential
Psono
Psono is an open-source password manager designed for teams and enterprises, with the most permissive license (Apache 2.0) among server-based open-source password managers.
License: Apache-2.0 (OSS) · Kind: web · Deploy: direct, docker · SSO: OIDC
ResorsIT usage: Web App with SSO
Access & Identity: Single sign-on · Directory / LDAP
RoboForm
RoboForm is one of the oldest password managers in the industry, originally launched in 1999 by Siber Systems. It began as an advanced form-filling tool and evolved into a full password management platform.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: SAML
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on · Provisioned account
sysPass
sysPass is a PHP-based web password manager designed for IT teams and system administrators. It provides a centralized web interface for storing and managing passwords with categories, client profiles, and user/group-based access controls.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: direct, docker · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Directory / LDAP
Teampass
Teampass is a PHP-based collaborative password manager designed for teams. It provides a web interface for storing, organizing, and sharing credentials with role-based access controls.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: direct · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Directory / LDAP
Vaultwarden
Vaultwarden (formerly bitwarden_rs) is a community-maintained, lightweight alternative implementation of the Bitwarden server API written in Rust.
License: AGPL-3.0-only (OSS) · Kind: web · Deploy: direct, docker · SSO: OIDC
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on
Zoho Vault
Zoho Vault is the password management component of the Zoho ecosystem, which encompasses over 200 business applications including CRM, mail, projects, and analytics.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: SAML
ResorsIT usage: Web App without SSO
Access & Identity: Single sign-on
