CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ206

VerifiedIdentity and Access Management (IAM)

A company must provide external business partners with shared access to sensitive data in cloud storage. Which identity model is BEST for blinding identity providers (IdPs) and relying parties (RPs) so that other parties’ subscriber lists are not disclosed?

Explanation

Proxied federation intermediates communication between an IdP and an RP. Its double-blind and triple-blind proxy configurations can hide the parties’ identities from one another, which protects the confidentiality of their subscriber lists. NIST SP 800-63C

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!