Which of the following is NOT a component of Single Sign-On (SSO)?

Question

Options

• AIdentity Provider (IdP)
• BService Provider (SP)
• CAssertion
• DAAA Server

• B
  6% (1)
• C
  6% (1)
• D
  89% (16)

Explanation

D (AAA Server) is the answer because AAA (Authentication, Authorization, and Accounting) is a separate security framework - typically implemented via protocols like RADIUS or TACACS+ - used for network access control, not for Single Sign-On. It is a distinct concept that operates independently of SSO architecture.

The distractors are all genuine SSO components: the Identity Provider (A) is the trusted system that authenticates users (e.g., Okta, Azure AD); the Service Provider (B) is the application that delegates authentication to the IdP; and an Assertion (C) is the signed token (commonly a SAML assertion) the IdP passes to the SP to confirm the user's identity.

Memory tip: Think of SSO as a "trust triangle" - the IdP asserts identity, the SP trusts that assertion, and the Assertion is the handshake between them. AAA doesn't fit this triangle because it handles network access accounting, not federated web authentication.

No community discussion yet for this question.