CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ144

VerifiedIdentity and Access Management (IAM)

A security professional is assigned to assess a web application. The assessment report recommends changing to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit of switching to SAML?

Explanation

SAML uses authentication assertions issued by an identity provider, allowing a service provider to authenticate the user without receiving the user’s password. This reduces password exposure across relying web applications while enabling federated authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!