interactionsso

Interactionsso is a term used to describe a proposed framework for coordinating user-facing interaction flows in single sign-on (SSO) across multiple applications. It envisions a centralized interaction layer that standardizes authentication prompts, consent requests, multi-factor challenges, and device checks presented to users during sign-on, across diverse service ecosystems.

In practice, when a user tries to access a service, the relying party redirects to an identity provider. An interaction broker determines the appropriate prompts and policies, ensuring a consistent UI. The IdP conducts authentication, MFA, and policy checks, then issues a token or assertion to the relying party, with prompts synchronized across participating services.

Interactionsso is not a single protocol but a coordination model layered on existing standards such as OAuth 2.0, OpenID Connect, and SAML. It defines APIs and messages that orchestrate user prompts, risk checks, and consent among the IdP, relying parties, and any mediation services, supported by a policy engine and adapters.

Security and privacy considerations include reducing fragmentation of prompts and potentially lowering phishing risk through a unified interface. Risk is the centralization of the interaction layer, so strong authentication of the broker, tamper-evident logging, least-privilege access, and privacy-by-design practices are essential.

As of the mid-2020s, interactionsso remains largely experimental or aspirational. Some vendors explore related coordination models for enterprise SSO, but there is no universal standard. Critics point to added complexity, potential centralization risks, and the need for robust interoperability guarantees. See also: single sign-on, OAuth 2.0, OpenID Connect, SAML, identity federation.