CISSP Practice Question (Identity and Access Management (IAM)

CISSP Practice Question (Identity and Access Management (IAM) - Hard):

A multinational corporation, TechGlobal, is planning to establish an identity federation with a partner company, SecureData Inc., to facilitate seamless access for its employees to SecureData's proprietary data analysis tools. Both companies use different identity providers and authentication mechanisms. TechGlobal uses an LDAP-based system for authentication, while SecureData uses SAML for its web applications. To ensure secure and efficient user access, what is the most appropriate approach for TechGlobal to implement identity federation, considering the technical compatibilities and the need for secure data exchange?

Options:

A. Integrate TechGlobal's LDAP system directly with SecureData's SAML-based applications.

B. Implement a SAML-based identity provider at TechGlobal and establish a federated trust with SecureData's identity provider.

C. Use a third-party identity broker that supports both LDAP and SAML to mediate between TechGlobal and SecureData.

D. Develop a custom API solution to translate LDAP authentication requests into SAML assertions.

Come back for the answer tomorrow! Study more at https://cissp.app

7 comments