CISSP Practice Question (Identity and Access Management (IAM)

CISSP Practice Question (Identity and Access Management (IAM) - Hard):

A multinational corporation is in the process of merging its IT infrastructure with a recently acquired company. The goal is to allow seamless access to corporate resources for employees from both organizations while maintaining security and compliance with regulatory requirements. The acquired company's infrastructure uses a different identity provider than the parent company. As the lead IAM architect, you need to design a solution that supports Single Sign-On (SSO) for both companies' users accessing shared resources. Which identity federation protocol should you recommend implementing to achieve this integration while ensuring secure authentication and authorization?

Options:

A. Option A: Security Assertion Markup Language (SAML)

B. Option B: OAuth 2.0

C. Option C: Lightweight Directory Access Protocol (LDAP)

D. Option D: Kerberos

19 comments