How do SSO and MFA complement each other in a typical user login flow?

• A. SSO authenticates once for multiple apps; MFA provides a second factor during login or for high-risk actions.
• B. SSO handles password resets.
• C. MFA replaces SSO.
• D. SSO and MFA are unrelated.

Answer: (C)

SSO and MFA work together to balance security and usability in a typical login flow. You authenticate once at the SSO portal, and after that successful login you get a session that lets you access multiple connected applications without re-entering credentials. MFA adds a second verification factor during that login or when you perform sensitive actions—things like approving a push notification, entering a code from an authenticator app, or using a hardware key. This combination lets you enjoy seamless access across apps while still proving your identity with an extra factor to prevent unauthorized access. If risk is detected during a session, the system can require MFA again for step-up authentication, adding security without forcing separate logins for each app. In short, SSO provides broad access across many apps, and MFA strengthens the login with additional verification—they complement each other rather than replace one another.