Examkin

Question

Difficulty: EasyIdentity and Access Management Architecture

A organization needs to integrate its internal directory service with external cloud services so that employees can authenticate to third-party web portals using their existing corporate credentials. Which XML-based open standard should the identity architect select to enable cross-domain single sign-on (SSO)?

  1. Security Assertion Markup Language (SAML)Answer
  2. B
    Lightweight Directory Access Protocol (LDAP)
  3. C
    Remote Authentication Dial-In User Service (RADIUS)
  4. D
    Kerberos

Answer

Security Assertion Markup Language (SAML)
Security Assertion Markup Language (SAML) is an XML-based framework used for exchanging security assertions containing authentication details between an identity provider and external service providers, enabling web-based federated single sign-on.

Step-by-Step Solution

1
Identify the core requirement
The requirement calls for an XML-based open standard that supports cross-domain single sign-on (SSO) to external web applications using corporate credentials.
Establishing identity federation across disparate organizational boundaries requires a standard token format for asserting user identities securely across web browsers.
2
Evaluate candidate protocols
Security Assertion Markup Language (SAML) uses XML assertions passed via HTTP to authenticate users between an Identity Provider (IdP) and a Service Provider (SP).
Protocols such as LDAP, RADIUS, and Kerberos are designed for local network directory queries or network access AAA, rather than federated web SSO.

Key Concept

Federated Identity and SAML Architecture
Estimated Time:45s
Rate this question

Topics

Identity and Access Management Architecture

More questions from this topic