500-444 · Question #46
Which service is used to provide authorization between the Identity Provider (IdP) and application?
The correct answer is C. Active Directory Federation Services (ADFS). ADFS is a Microsoft service that acts as a federation broker, sitting between the Identity Provider (Active Directory) and relying-party applications to handle the authorization handshake - issuing claims-based tokens that applications trust. It enables SSO by establishing a…
Question
Which service is used to provide authorization between the Identity Provider (IdP) and application?
Options
- ASAML
- BOAuthv2
- CActive Directory Federation Services (ADFS)
- DIdentity Service (IdS)
How the community answered
(22 responses)- A5% (1)
- B9% (2)
- C86% (19)
Explanation
ADFS is a Microsoft service that acts as a federation broker, sitting between the Identity Provider (Active Directory) and relying-party applications to handle the authorization handshake - issuing claims-based tokens that applications trust. It enables SSO by establishing a trust relationship between the IdP and the application, making it the correct answer for a service that provides this bridge.
Why the others are wrong:
- SAML (A) is an XML-based protocol/standard for exchanging authentication and authorization data - it's what ADFS uses, not a service itself.
- OAuthv2 (B) is an authorization framework, not a service; it defines how tokens are granted but doesn't itself sit between IdP and application.
- Identity Service (IdS) (D) is not a recognized standard service in the identity federation space - it's a plausible-sounding distractor.
Memory tip: Watch for the word service in the question. SAML and OAuth are protocols/frameworks; ADFS is the actual service deployed to federate identity between an IdP and applications.
Topics
Community Discussion
No community discussion yet for this question.