Deciding whether to use single sign on authentication or two factor authentication depends upon your organizational needs and requirements. Single sign on is appropriate for certain basic types of connections because it helps save time. For instance you might use this method to authenticate users against network printers. Single sign on helps eliminate requiring users to supply additional log on details or having them reenter or use another user name and password each time they print.
Use Two Factor Authentication for Important Data Instead of Single Sign on Authentication
You should avoid using single sign on authentication in cases where data needs to be kept secure. Data types often include employee personal records, payroll information, accounts receivable and payable, proprietary information, and research and development data. Rather you would want to consider using two factor authentication processes to access these kinds of information because access is easier to restrict. Users who do not have the necessary digital certificate are prevented from connecting and accessing the data.