300-445 Question 163
Single answerAn organization is developing a web application that requires integration with a third-party service for user authentication. The organization wants a secure and scalable solution that supports Single Sign-On (SSO) and federated identity management. Which authentication method should the organization implement?
- A
Basic authentication
- B
OAuth 2.0
- C
Digest authentication
- D
SAML (Security Assertion Markup Language)
Show answer and explanation
Correct answer: D
Explanation
SAML (Security Assertion Markup Language) is a standard protocol used for exchanging authentication and authorization data between parties, particularly in SSO and federated identity scenarios. It is ideal for organizations that need secure integration with third-party services while enabling seamless login experiences for users. Other methods like Basic and Digest authentication lack the necessary features for SSO, and OAuth 2.0 is primarily focused on authorization rather than authentication.
- A. Incorrect.
Basic authentication transmits credentials (username and password) in an encoded format, but it lacks the scalability and security features required for SSO and federated identity management.
- B. Incorrect.
OAuth 2.0 is a token-based protocol designed for authorization, not authentication. While it can be used in conjunction with federated identity, it is not the primary protocol for SSO.
- C. Incorrect.
Digest authentication provides slightly more security than basic authentication by hashing credentials, but it is outdated and does not support SSO or federated identity management.
- D. Correct.
SAML is specifically designed for federated identity management and supports Single Sign-On (SSO), making it the best fit for the organization's requirements.