CIAM CIAM Federation and Single Sign-On 1 — Questions and Answers
Question 1: What protocol is commonly used for federated identity management to exchange authentication and authorization data between parties?
- LDAP
- SAML (Correct answer)
- RADIUS
- SNMP
Correct answer: SAML
SAML (Security Assertion Markup Language) is the standard XML-based protocol for exchanging authentication and authorization data in federated identity systems.
Question 2: In Single Sign-On, what is the component that authenticates users and issues tokens or assertions called?
- Service Provider
- Identity Provider (Correct answer)
- Resource Server
- Authorization Server
Correct answer: Identity Provider
The Identity Provider (IdP) authenticates users and issues tokens or assertions that Service Providers trust to grant access.
Question 3: Which OAuth 2.0 flow is recommended for server-to-server authentication without user interaction?
- Authorization Code Flow
- Implicit Flow
- Client Credentials Flow (Correct answer)
- Device Authorization Flow
Correct answer: Client Credentials Flow
The Client Credentials Flow is designed for machine-to-machine authentication where no user is present and only client credentials are used.
Question 4: What is 'IdP-initiated SSO'?
- SSO where the user starts at the service provider
- SSO where the authentication process begins at the identity provider (Correct answer)
- SSO that uses only LDAP directory lookups
- SSO that requires multi-factor authentication
Correct answer: SSO where the authentication process begins at the identity provider
In IdP-initiated SSO, the user first navigates to the Identity Provider, which authenticates them and then redirects to the target service with an assertion.
Question 5: What is a federation trust in identity management?
- An encrypted VPN tunnel between servers
- A formal agreement between identity domains to accept each other's authentication assertions (Correct answer)
- A firewall policy governing inter-domain traffic
- A certificate revocation list shared between organizations
Correct answer: A formal agreement between identity domains to accept each other's authentication assertions
A federation trust is a formal relationship between identity domains that establishes mutual acceptance of authentication assertions and defines the terms of that acceptance.
Question 6: What does WS-Federation stand for?
- Web Services Federation (Correct answer)
- Wide-Scale Federation
- Workstation Security Federation
- Web Standard Federation
Correct answer: Web Services Federation
WS-Federation (Web Services Federation) is a Microsoft-developed protocol that enables identity and security information sharing across different security domains.
CIAM CIAM Federation and Single Sign-On 1
What protocol is commonly used for federated identity management to exchange authentication and authorization data between parties?