What is the difference between DAL (Direct Access Link) and SSO (Single Sign-On)?

Summary Table:

Feature	DAL (Direct Access Link)	SSO (Single Sign-On)
Link Type	Unique and personal for each voter.	Single static link shared across all voters.
Email Dispatch	Sent automatically by Eligo to each voter.	No emails sent by Eligo (link distributed by admin).
Authentication	Unique token embedded in the email link.	Organizational credentials (Google, M365, etc.).
Forwarding Security	Anyone receiving the forwarded link can cast the vote.	Secure: requires logging in with personal SSO credentials.
Voter List	Mandatory (spreadsheet uploaded in advance).	Mandatory (verified during SSO login).

Access via DAL (Direct Access Link)

In DAL mode, Eligo sends each voter an email containing a personal link generated with a unique token that provides immediate authentication and direct access to the ballots. Although the link can be reopened for review, the system guarantees that only one single vote is cast per voter profile, blocking any subsequent attempt once a ballot is submitted. Consequently, if the email is forwarded to someone else before voting, whoever uses the link will cast the single vote allocated to that identity.

Access via SSO (Single Sign-On)

With SSO integration, the platform sends no individual emails to voters; instead, it generates a single static link which the administrator can freely publish or share through official corporate communication channels or meeting notices, as described here.

Voters authenticate directly using their organizational credentials, and Eligo verifies their voting eligibility by checking the authenticated user against the pre-uploaded list. Those on the list gain access to active ballots, whereas unlisted users receive a message indicating they are not part of the voting area. Forwarding the static link poses no security risk because every user must log in with their own personal credentials.

In both access type, uploading the voter list in advance remains mandatory.