Examkin

Question

Difficulty: EasyIdentity and Access Management Architecture

An enterprise wants to allow its employees to securely sign in to multiple external cloud-based vendor applications using their central corporate identity provider, ensuring that user passwords are never transmitted to or stored by the external vendors. Which Identity and Access Management (IAM) architectural solution best fulfills this requirement?

  1. Federated Identity Management using Single Sign-On protocolsAnswer
  2. B
    Role-Based Access Control matrix configured within each external SaaS portal
  3. C
    Network Access Control gateway enforcing 802.1X port security at the perimeter
  4. D
    Mandatory Access Control policy applied directly to the cloud application servers

Answer

Federated Identity Management using Single Sign-On protocols is the correct architectural solution.
Federated Identity Management allows organizations to establish single sign-on across separate administrative domains. Through standards like SAML 2.0 or OpenID Connect, the central Identity Provider authenticates the user locally and issues a cryptographically signed assertion token to external cloud applications, preventing credential exposure.

Step-by-Step Solution

1
Analyze the enterprise requirement
The requirement calls for centralized identity verification across external domain boundaries without sharing sensitive passwords.
Security best practices demand establishing trust relationships with external cloud services via centralized assertions.
2
Evaluate IAM architectural solutions for cross-domain identity sharing
Federated Identity Management (using standards such as SAML or OIDC) relies on token-based assertions from an Identity Provider (IdP) to Service Providers (Relying Parties).
Tokens allow external vendors to validate user identity securely without ever receiving password credentials.

Key Concept

Federated Identity Management and Cross-Domain Trust Architecture
Estimated Time:45s
Rate this question

Topics

Identity and Access Management Architecture

More questions from this topic