What process provides a shared login capability across multiple systems and enterprises, connecting identity management services?

What process provides a shared login capability across multiple systems and enterprises, connecting identity management services?

• A. Identity brokering
• B. Federation
• C. Cross-domain SSO
• D. Single Sign-On

Answer: (B)

Federation is the process that creates a trusted relationship between multiple organizations’ identity management systems so a user can use their home credentials to access resources across partner systems. It relies on exchanging identity information or tokens between an identity provider in the user’s organization and service providers in other organizations, using standards such as SAML, OAuth/OpenID Connect, or WS-Federation. This enables a shared login capability across enterprises because authentication is handled by the trusted IdP, and the relying services accept that assertion without prompting for new credentials. Single sign-on is the outcome of this capability, often within a defined boundary, while cross-domain SSO describes the scenario across domains; federation is the underlying mechanism that makes cross-domain, multi-enterprise authentication possible. Identity brokering can be involved, but federation specifically refers to establishing and leveraging the trust framework that connects identity management services across organizations.

Federation is the process that creates a trusted relationship between multiple organizations’ identity management systems so a user can use their home credentials to access resources across partner systems. It relies on exchanging identity information or tokens between an identity provider in the user’s organization and service providers in other organizations, using standards such as SAML, OAuth/OpenID Connect, or WS-Federation. This enables a shared login capability across enterprises because authentication is handled by the trusted IdP, and the relying services accept that assertion without prompting for new credentials.

Single sign-on is the outcome of this capability, often within a defined boundary, while cross-domain SSO describes the scenario across domains; federation is the underlying mechanism that makes cross-domain, multi-enterprise authentication possible. Identity brokering can be involved, but federation specifically refers to establishing and leveraging the trust framework that connects identity management services across organizations.