CISSP Practice Question – Identity & Access Management

An enterprise is moving to a hybrid cloud model and wants to centralize user authentication across on-premises systems and multiple SaaS providers. The solution must support single sign-on (SSO), enforce multi-factor authentication (MFA), and minimize administrative overhead for provisioning and deprovisioning accounts.

Which of the following approaches BEST meets these requirements?

A. Deploying Kerberos across all environments, including the SaaS providers

B. Implementing a Security Assertion Markup Language (SAML)–based federation with an identity provider

C. Using RADIUS servers for all authentication requests to centralize credential management

D. Requiring each SaaS provider to integrate directly with the corporate LDAP directory

14 comments