QuestionQ40

Security Design

Identity and access management across multiple users and applications has become a mandatory requirement for Company XYZ to combat increasingly severe cybersecurity threats. To accomplish this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for applications and services. Which protocol can Company XYZ use to provide authentication and authorization services?

  • A OAuth2
  • B OpenID Connect
  • C OpenID
  • D SAML 2.0
Explanation

SAML 2.0 supports federated single sign-on by exchanging assertions between an identity provider and service providers. Its assertions can convey authentication, user attributes, and authorization decisions, making it suitable for authentication and authorization services across multiple applications.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!