Examkin

Soru

Zorluk: OrtaIdentity and Access Management Architecture

An enterprise is implementing a federated web single sign-on (SSO) solution allowing corporate users to access external cloud applications seamlessly. The architectural requirement mandates using an open standard that relies on XML-based security assertions to transmit authentication state and user attributes from the Identity Provider (IdP) to the Service Provider (SP). Which of the following protocols should the security architect select to meet these requirements?

  1. SAML (Security Assertion Markup Language)Cevap
  2. B
    OAuth 2.0
  3. C
    RADIUS
  4. D
    Kerberos

Cevap

SAML (Security Assertion Markup Language) is the correct architectural choice for XML-based federated web SSO between an Identity Provider and a Service Provider.
Security Assertion Markup Language (SAML) is an open XML-based standard created specifically for federated Single Sign-On (SSO). It allows an Identity Provider (IdP) to package authentication state, user attributes, and entitlement assertions into XML tokens sent to a Service Provider (SP), perfectly satisfying all stated requirements.

Adım Adım Çözüm

1
Identify key architectural requirements from the scenario.
The requirements demand a web-based federated SSO architecture using XML-based security assertions between an Identity Provider (IdP) and a Service Provider (SP).
Accurately pinpointing protocol capability criteria is required before selecting IAM security controls.
2
Evaluate standard identity protocols against the XML assertion constraint.
Security Assertion Markup Language (SAML) specifically utilizes XML formatted security assertions to communicate user identity and authentication status across domain boundaries.
OAuth 2.0 and OIDC use JSON tokens, RADIUS uses UDP attribute-value pairs, and Kerberos uses ticket grants within symmetric domain trusts.

Anahtar Kavram

Federated Identity and Access Architecture
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru