Examkin

Question

Difficulty: EasyIdentity and Access Management Architecture

Match each Identity and Access Management (IAM) protocol or standard to its primary architectural function in an enterprise environment.

  • SAML 2.0Enables XML-based federated web Single Sign-On (SSO) between an Identity Provider and a Service Provider.
  • OAuth 2.0Issues access tokens to grant third-party applications scoped authorization to access API resources on behalf of a resource owner.
  • SCIMAutomates identity provisioning and user account lifecycle updates across cloud platforms using RESTful APIs.
  • KerberosProvides ticket-based mutual authentication for users and services within an internal domain environment using a Key Distribution Center.

Answer

SAML 2.0 matches XML-based web SSO federation; OAuth 2.0 matches token-based API authorization delegation; SCIM matches automated identity provisioning and account lifecycle management; Kerberos matches ticket-based internal domain authentication via a KDC.
Each IAM protocol serves a distinct architectural layer: SAML 2.0 manages XML web SSO federation; OAuth 2.0 provides token-based API authorization; SCIM automates identity profile provisioning across cloud apps; and Kerberos performs ticket-based domain authentication.

Step-by-Step Solution

1
Identify the primary purpose of SAML 2.0.
SAML 2.0 handles federated web Single Sign-On (SSO) using XML assertions between an IdP and SP.
SAML is an enterprise federation standard for web application authentication.
2
Identify the primary purpose of OAuth 2.0.
OAuth 2.0 delegates API access permissions using authorization access tokens.
OAuth 2.0 focuses on authorization and token delegation rather than authentication.
3
Identify the primary purpose of SCIM.
SCIM standardizes REST/JSON user profile creation, updating, and deprovisioning.
SCIM automates cross-system user identity sync across cloud services.
4
Identify the primary purpose of Kerberos.
Kerberos handles ticket-based domain authentication using a Key Distribution Center (KDC).
Kerberos is the default protocol for local directory infrastructure like Active Directory.

Key Concept

Identity and Access Management Architecture Protocols
Rate this question

Topics

Identity and Access Management Architecture

More questions from this topic