Identity federation for cloud services is commonly enabled using which standard?

Identity federation for cloud services is commonly enabled using which standard?

• A. SAML
• B. NTLM
• C. MFA
• D. PKI

Answer: (A)

Identity federation across cloud services relies on a standard that formalizes how a user’s identity and authentication are shared between an identity provider and service providers to enable single sign-on across trusted domains. The standard that fits this need is SAML (Security Assertion Markup Language). It defines how authentication assertions are created, transmitted, and trusted, typically using XML-based messages and digital signatures, so a user can sign in once with an identity provider to access multiple cloud services without re-entering credentials. NTLM is a Windows authentication protocol not meant for cross-domain federation, MFA is a method of adding factors to authentication rather than the federation mechanism, and PKI deals with encryption and certificates rather than the federation protocol itself.

Identity federation across cloud services relies on a standard that formalizes how a user’s identity and authentication are shared between an identity provider and service providers to enable single sign-on across trusted domains. The standard that fits this need is SAML (Security Assertion Markup Language). It defines how authentication assertions are created, transmitted, and trusted, typically using XML-based messages and digital signatures, so a user can sign in once with an identity provider to access multiple cloud services without re-entering credentials. NTLM is a Windows authentication protocol not meant for cross-domain federation, MFA is a method of adding factors to authentication rather than the federation mechanism, and PKI deals with encryption and certificates rather than the federation protocol itself.