The SSO PKCS#11 service is also called remote or virtual PKCS#11. It allows all processes to share the same PKCS#11 library. This enables single sign-on for all applications that uses our PKCS#11 library, since they share the same internal state. This component will enable single sign-on without the need of storing the PIN value in a global cache. Besides the obvious security improvement, it also enables the use of single sign-on with PIN PAD readers.
Normally, this component will only run as system service.