Which standard enables federated identity management by allowing resource servers to rely on an external identity provider?

Prepare for the Information Security Principles and Frameworks Test. Enhance your understanding with detailed questions, hints, and explanations. Ace your exam with confidence!

Multiple Choice

Which standard enables federated identity management by allowing resource servers to rely on an external identity provider?

Explanation:
Federated identity management relies on an external identity provider to authenticate users and issue tokens that other services trust. OAuth 2.0 enables this pattern by letting a resource server accept access tokens issued by an external authorization server (the identity provider). This means the resource server doesn’t handle user credentials itself; authentication and consent are handled by the IdP, while the token proves the user’s identity and permissions. REST, JSON, and IP don’t address this capability: REST is an API design approach, JSON is a data format, and IP is a network protocol.

Federated identity management relies on an external identity provider to authenticate users and issue tokens that other services trust. OAuth 2.0 enables this pattern by letting a resource server accept access tokens issued by an external authorization server (the identity provider). This means the resource server doesn’t handle user credentials itself; authentication and consent are handled by the IdP, while the token proves the user’s identity and permissions. REST, JSON, and IP don’t address this capability: REST is an API design approach, JSON is a data format, and IP is a network protocol.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy