An organization is updating its enterprise security architecture to streamline user access across external cloud applications. The security team needs to implement standards that support federated single sign-on (SSO) and automated account lifecycle management between the corporate identity provider and SaaS platforms. Which TWO of the following open standards should the team integrate into the IAM architecture to fulfill these specific requirements?
- Security Assertion Markup Language (SAML)Answer
- System for Cross-domain Identity Management (SCIM)Answer
- CNetwork Address Translation (NAT)
- DRole-Based Access Control (RBAC)
Answer
Security Assertion Markup Language (SAML) and System for Cross-domain Identity Management (SCIM) are the two open standards designed for federated single sign-on and cross-domain user provisioning.
Security Assertion Markup Language (SAML) provides the XML framework required to federate identity assertions between an Identity Provider and cloud Service Providers for single sign-on. System for Cross-domain Identity Management (SCIM) works alongside federated SSO by providing a standardized REST API payload format to automatically create, update, and remove user identity records across external cloud services.
Step-by-Step Solution
Key Concept
Federated Identity and Automated Provisioning Standards
Estimated Time:1m 0s