HKUST SSO Service provides a secure Single Sign-On (SSO) platform for users to access web applications or systems without needs of entering credentials every time.
- Enable Browser Single Sign-on (SSO) in Windows 10
- Account Switching - Sign in with different identity
- Security Precautions
Enable Browser Single Sign-on (SSO) in Windows 10
Browser SSO in Windows 10 allows you to sign in to supported websites using credentials from your Windows 10 operating system, without the need to enter your credentials again. Microsoft Edge, Google Chrome and Mozilla Firefox v91+ supports browser SSO:
-
Microsoft Edge
Microsoft Edge supports browser SSO in Windows 10 natively. If you already sign in Windows with your work or school account and signed in with your account to sync data with your Edge profile, browser SSO is already enabled.
Users are advised to sync your account with Edge. If you have an Edge profile that has not sign in to sync data, you can turn on Allow single sign-on for work or school sites:- Click your profile icon on upper right corner of your Edge
- Select Manage profile settings
- Select Profile Preference
- Turn on the option Allow single sign-on for work or school sites using this profile if necessary
-
Google Chrome
Please install and enable the Chrome extensions Windows 10 Accounts in order to use browser SSO in Windows 10. -
Mozilla Firefox
Firefox support Windows SSO starting in Firefox version 91+. Please check the box next to the Allow Windows single sign-on for Microsoft, work and school accounts setting.
Account Switching - Sign in with different identity
When you need to sign-in with another account, you can involve New InPrivate window with your web browser.
Below are ways to sign in with some common web browsers:
Microsoft Edge
You can access to protected application using the identity of your connected Windows account, without the need to sign in again.
In case you need to sign-in with another account, you can involve New InPrivate window (Ctrl+Shift+N).
You may also create multiple profiles for different accounts in Microsoft Edge if necessary:
- Select Profile, then choose Manage profile settings.
- Select + Add profile.
- Select Add.
- Sign in to sync data, to connect to an existing account, then select Continue.
- Use the slider to toggle to Yes > Confirm.
Please also refer to Sign in and create multiple profiles in Microsoft Edge.
Google Chrome
In case you need to sign-in with another account, you can involve New Incognito window (Ctrl+Shift+N).
You may also create different profiles for different accounts if necessary. To add individual profiles to Chrome:
- Open the Chrome browser on your computer.
- At the top right, click Profile.
- Click Add.
- Choose a name and a photo.
- Click Add. A new window will open and ask you to turn on sync.
- Optional: Turn sync on in Chrome with a Google Account for the new profile and their bookmarks, history, passwords, and other settings will automatically sync when you’re logged in on other devices.
Once you have individual profiles set up, you can toggle between users. To do this:
- Open Chrome on your computer.
- At the top right, click Profile.
- Choose the person or profile you want to switch to.
Please also refer to Share Chrome with others.
If you are using Windows and want to access applications added to Windows without re-entering your password, you may consider install the Windows 10 Accounts Chrome extension.
Mozilla Firefox
In case you need to sign-in with another account, you can involve New Private window (Ctrl+Shift+P).
You may also create different profiles in Firefox for different accounts if necessary. To create a browser profile through the Profile Manager:
- To start the Create Profile Wizard, click Profile Manager > Create Profile > Next.
- Enter the name of the profile. Use a profile name that is descriptive, such as your personal name — this user name will not be visible to anyone but you.
- You can also choose where to store the profile on your computer. To select a storage location, click Choose Folder.
- If you choose your folder location for the profile, select a new or empty folder. Please note that if you choose a folder that is not empty and you later remove the profile and choose the \”Delete Files\” option, everything inside that folder will be deleted.
- To create the new profile, click Finish.
To create a browser profile through the Firefox browser:
- Type about:profiles into the browser URL search bar.
- On the page, click Create a New Profile.
- Read the introduction, and click Next.
- Enter a profile name for your new Profile. Use a profile name that is descriptive, such as your personal name — this user name will not be visible to anyone but you.
- To create the new profile, click Finish.
Please also refer to Create, remove or switch Firefox profiles.
Safari
In case you need to sign-in with another account, you can involve New Private window (Shift+Cmd+N).
Please note that Safari does not offer the option to create individual browser profiles. If you use Safari on a Mac, you may consider setting up different user profiles and use the different profiles for different accounts.
Security Precautions
After signed in with your Windows 10, it can permit you to access to any protected applications with the browser single sign-on. We suggest the following security practice in order to enjoy this convenience.
-
Always lock your screen when you are away from your Windows PC after sign in.
-
Use a private window session when accessing classroom PC or PC of other colleagues.
-
In case you need to sign out from Microsoft explicitly with your web browser, you may use the URL https://login.microsoftonline.com/logout.srf
-
In situations that you want to logout all sign-in sessions. e.g. due to lost device, you may either
- Change your ITSC Account Password, or
- Invoke Sign out everywhere (under My Account --> Security info)