Active Directory provides a single point of management for network resources. Active Directory uses a single sign-on to allow access to network resources located on any server within the domain.
The user is identified and authenticated by Active Directory once. After this process is complete, the user signs on once to access the network resources that are authorized for, according to his or her assigned roles and privileges within Active Directory.