Think before you link: don't SSO for third-party apps

---

What's happening?

UOW students and staff are using SSO to access third-party unapproved applications, some of which request permissions to university data. If the applications are not secure, cyber criminals may be able to gain access to the applications and, in term, UOW’s data.  

What is Single Sign-On (SSO)?

Single Sign-On (SSO) is a security method that allows users to log in once to access multiple applications and services using a single set of credentials. At UOW, staff and students use their UOW username and password as their SSO credentials with Microsoft.  

Refer to the image on the right for an example of what an SSO login option for a third-party application could look like.

What's changing?

From 2 July 2025, you will not be able to use SSO to register for unsupported third-party applications, platforms or services. This will help safeguard university data and reduces the risk of unauthorised access to files and information.  

What should you do?

When registering for third-party applications, follow these guidelines:

• Use your personal email address for personal, non-work related applications
• Only use your UOW email address for business or work-related applications.
• Read more in our IT Acceptable Use Policy.  

If you’ve already registered for applications using SSO, you can still use these applications, but each one will be reviewed by our IMTS Cyber Security team who will contact you shortly.

Additional Information

If you require further information, please log a support request or contact the IT Service Desk on +61 2 4221 3000.