CCDE: Cisco Certified Design Expert (Practical) — Question 78

Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

Answer options

• A. OAuth2
• B. OpenID Connect
• C. OpenID
• D. SAML 2.0

Correct answer: D

Explanation

The correct answer is D, SAML 2.0, as it is specifically designed for federated identity management and supports single sign-on and Multi-Factor Authentication. While OAuth2 (option A) and OpenID Connect (option B) are used for authorization and identity verification, they do not match the requirements for federated identity in the same way SAML does. OpenID (option C) is an earlier version and lacks the features necessary for robust enterprise-level authentication and authorization.