What is the difference between SSO and local login for Epic End User?

What is the difference between SSO and local login for Epic End User?

• A. SSO stores credentials in a local server; local login uses the cloud.
• B. SSO bypasses authentication entirely.
• C. SSO uses only usernames, local login uses only passwords.
• D. SSO authenticates via an external identity provider; local login uses Epic credentials stored in the Epic security system.

Answer: (D)

SSO relies on an external identity provider to verify who you are. When you sign in, Epic delegates authentication to that external system (often your company’s directory or an IdP like Okta or Active Directory). After the IdP confirms your identity, Epic trusts that result and grants access. Local login, on the other hand, uses credentials that are stored and validated directly within Epic’s own security system—the Epic username and password you set up in Epic. That’s why the correct choice says SSO authenticates via an external identity provider, while local login uses Epic credentials stored in Epic’s security system. The other statements don’t fit: SSO does not bypass authentication, it simply redirects the authentication step to an external provider; credential storage and the types of credentials aren’t limited to “local passwords” vs. “cloud” in the way those options describe, and SSO isn’t defined by using only usernames or only passwords.

SSO relies on an external identity provider to verify who you are. When you sign in, Epic delegates authentication to that external system (often your company’s directory or an IdP like Okta or Active Directory). After the IdP confirms your identity, Epic trusts that result and grants access. Local login, on the other hand, uses credentials that are stored and validated directly within Epic’s own security system—the Epic username and password you set up in Epic.

That’s why the correct choice says SSO authenticates via an external identity provider, while local login uses Epic credentials stored in Epic’s security system. The other statements don’t fit: SSO does not bypass authentication, it simply redirects the authentication step to an external provider; credential storage and the types of credentials aren’t limited to “local passwords” vs. “cloud” in the way those options describe, and SSO isn’t defined by using only usernames or only passwords.