C_SEC_2405 · Question #41
Which protocol is the industry standard for provisioning identity and access management in hybrid landscapes?
The correct answer is A. SCIM. SCIM (System for Cross-domain Identity Management) is the industry standard specifically designed for provisioning - automating the creation, update, and deletion of user identities across systems in hybrid (cloud + on-prem) landscapes. It uses a RESTful API with JSON payloads…
Question
Which protocol is the industry standard for provisioning identity and access management in hybrid landscapes?
Options
- ASCIM
- BSAML
- COIDC
- DSSL
How the community answered
(18 responses)- A72% (13)
- B11% (2)
- D17% (3)
Explanation
SCIM (System for Cross-domain Identity Management) is the industry standard specifically designed for provisioning - automating the creation, update, and deletion of user identities across systems in hybrid (cloud + on-prem) landscapes. It uses a RESTful API with JSON payloads to sync identity data between an identity provider and target applications.
SAML handles authentication via XML-based assertions (SSO), not provisioning - it verifies who you are, but doesn't manage your account lifecycle. OIDC (OpenID Connect) is similarly an authentication protocol built on OAuth 2.0, used to log users in, not to provision or deprovision them. SSL is a transport-layer encryption protocol entirely outside the identity management domain.
Memory tip: Think "SCIM = Sync Credentials Into Multiple systems." If the question uses the word provisioning, the answer is almost always SCIM.
Topics
Community Discussion
No community discussion yet for this question.