Practice Test Geeks(CIAM) Certified Identity and Access Manager Practice Test
← All CIAM Flashcard Decks

CIAM Federation and Single Sign-On Flashcards

6 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CIAM Federation and Single Sign-On flashcards as text

  1. What protocol is commonly used for federated identity management to exchange authentication and authorization data between parties?

    Answer: SAML

    SAML (Security Assertion Markup Language) is the standard XML-based protocol for exchanging authentication and authorization data in federated identity systems.

  2. In Single Sign-On, what is the component that authenticates users and issues tokens or assertions called?

    Answer: Identity Provider

    The Identity Provider (IdP) authenticates users and issues tokens or assertions that Service Providers trust to grant access.

  3. Which OAuth 2.0 flow is recommended for server-to-server authentication without user interaction?

    Answer: Client Credentials Flow

    The Client Credentials Flow is designed for machine-to-machine authentication where no user is present and only client credentials are used.

  4. What is 'IdP-initiated SSO'?

    Answer: SSO where the authentication process begins at the identity provider

    In IdP-initiated SSO, the user first navigates to the Identity Provider, which authenticates them and then redirects to the target service with an assertion.

  5. What is a federation trust in identity management?

    Answer: A formal agreement between identity domains to accept each other's authentication assertions

    A federation trust is a formal relationship between identity domains that establishes mutual acceptance of authentication assertions and defines the terms of that acceptance.

  6. What does WS-Federation stand for?

    Answer: Web Services Federation

    WS-Federation (Web Services Federation) is a Microsoft-developed protocol that enables identity and security information sharing across different security domains.