An organization is updating its enterprise access architecture to grant external partner employees access to web applications hosted in a private cloud. The security team requires a federated identity solution that allows partners to authenticate using their own Identity Provider (IdP) and transmit digitally signed XML security assertions to the relying application without syncing credentials or exposing internal directory endpoints. Which of the following identity standards should the security team implement?
- Security Assertion Markup Language (SAML)Cevap
- BRemote Authentication Dial-In User Service (RADIUS)
- CLightweight Directory Access Protocol over TLS (LDAPS)
- DKerberos with cross-realm trust
Cevap
Security Assertion Markup Language (SAML) is the correct selection because it uses digitally signed XML tokens transmitted over HTTP to establish cross-organizational web single sign-on without sharing account passwords.
Security Assertion Markup Language (SAML) is the standard protocol for web-based federated single sign-on (SSO). It allows an Identity Provider (IdP) to authenticate a user and securely pass digitally signed XML security assertions to a Service Provider (SP) via standard HTTP browser redirections, enabling secure cross-organizational access without sharing or synchronizing user credentials.
Adım Adım Çözüm
Anahtar Kavram
Federated Identity Architecture and Web Single Sign-On (SAML)
Tahmini Süre:1m 0s