Soru

Zorluk: KolayIdentity and Access Management Architecture

A organization needs to integrate its internal directory service with external cloud services so that employees can authenticate to third-party web portals using their existing corporate credentials. Which XML-based open standard should the identity architect select to enable cross-domain single sign-on (SSO)?

  1. Security Assertion Markup Language (SAML)Cevap
  2. B
    Lightweight Directory Access Protocol (LDAP)
  3. C
    Remote Authentication Dial-In User Service (RADIUS)
  4. D
    Kerberos

Cevap

Security Assertion Markup Language (SAML)
Security Assertion Markup Language (SAML) is an XML-based framework used for exchanging security assertions containing authentication details between an identity provider and external service providers, enabling web-based federated single sign-on.

Adım Adım Çözüm

1
Identify the core requirement
The requirement calls for an XML-based open standard that supports cross-domain single sign-on (SSO) to external web applications using corporate credentials.
Establishing identity federation across disparate organizational boundaries requires a standard token format for asserting user identities securely across web browsers.
2
Evaluate candidate protocols
Security Assertion Markup Language (SAML) uses XML assertions passed via HTTP to authenticate users between an Identity Provider (IdP) and a Service Provider (SP).
Protocols such as LDAP, RADIUS, and Kerberos are designed for local network directory queries or network access AAA, rather than federated web SSO.

Anahtar Kavram

Federated Identity and SAML Architecture
Tahmini Süre:45s
Bu soruyu puanla