Empowering Users: Towards User-Centric Consent Mechanisms in Single Sign-On Systems

Abstract

This article explores the importance of putting users at the center of consent processes, in Single Sign On (SSO) systems to tackle privacy issues and empower user independence. It dives into the world of SSO systems shedding light on their privacy weaknesses and the need for users to have control over how their data is shared. By looking at privacy focused SSO solutions and their drawbacks the article suggests a plan to give users control over their data sharing preferences during authentication. The main elements of this plan include a user consent management interface, consent choices, educational materials, preference persistence and tracking logs. Additionally it talks about the obstacles in implementing consent driven SSO systems like creating consent APIs and incorporating privacy boosting technologies such as zero knowledge proofs and decentralized identity frameworks. By tackling these hurdles and promoting designs that prioritize users the article aims to help create authentication solutions that prioritize privacy in line, with changing regulations and user desires.