Examkin

Soru

Zorluk: OrtaIdentity and Access Management Architecture

Match each enterprise identity and access management (IAM) protocol or standard on the left with its primary architectural function on the right.

  • OAuth 2.0An authorization framework that issues delegated access tokens for RESTful APIs without sharing user credentials.
  • OpenID Connect (OIDC)An authentication layer built on top of OAuth 2.0 that uses JSON Web Tokens (ID tokens) to verify user identity.
  • SAML 2.0An XML-based standard for exchanging authentication and authorization data across federated enterprise web domains.
  • SCIMAn HTTP-based open standard used to automate cross-domain user identity provisioning and account lifecycle updates.

Cevap

OAuth 2.0 matches API authorization delegation; OpenID Connect matches the OAuth 2.0 identity/authentication layer; SAML 2.0 matches XML-based federated Web SSO; SCIM matches automated identity provisioning.
Each protocol serves a distinct architectural purpose in modern enterprise IAM systems: OAuth 2.0 handles delegated API access control, OIDC provides modern OAuth-based user authentication, SAML 2.0 delivers traditional XML-based federated web SSO, and SCIM automates identity lifecycle management and provisioning across cloud and on-premises directories.

Adım Adım Çözüm

1
Differentiate authentication vs. authorization frameworks.
Identify OAuth 2.0 as strictly authorization/delegation, and OIDC as the identity authentication extension.
OAuth 2.0 alone provides access tokens for API authorization, whereas OIDC adds ID tokens for user authentication.
2
Identify web federation formats.
Match SAML 2.0 to XML-based security assertions.
SAML 2.0 is the legacy enterprise XML standard for cross-domain SSO federations between IdPs and SPs.
3
Identify identity lifecycle management standards.
Match SCIM to automated cross-domain user provisioning.
SCIM uses standardized REST endpoints and JSON payloads to sync user account states across systems.

Anahtar Kavram

Enterprise IAM Architectural Protocols & Standards
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru