CAS-002 · Question #194
Company ABC was formed by combining numerous companies which all had multiple databases, web portals, and cloud data sets. Each data store had a unique set of custom developed authentication…
The correct answer is D. Federated IDs. Federated identity allows existing disparate authentication systems to interoperate through trust relationships, avoiding the cost of rebuilding or replacing any of them.
Question
Company ABC was formed by combining numerous companies which all had multiple databases, web portals, and cloud data sets. Each data store had a unique set of custom developed authentication mechanisms and schemas. Which of the following approaches to combining the disparate mechanisms has the LOWEST up front development costs?
Options
- AAttestation
- BPKI
- CBiometrics
- DFederated IDs
How the community answered
(22 responses)- A5% (1)
- B5% (1)
- C9% (2)
- D82% (18)
Why each option
Federated identity allows existing disparate authentication systems to interoperate through trust relationships, avoiding the cost of rebuilding or replacing any of them.
Attestation is a process for verifying hardware or software integrity, not a mechanism for combining or federating disparate user authentication systems.
PKI requires deploying or expanding a certificate authority infrastructure and potentially re-issuing credentials to all users, resulting in significant upfront costs.
Biometrics requires purchasing and deploying hardware sensors across all locations and building new enrollment databases, incurring substantial upfront investment.
Federated identity (using standards like SAML or OAuth/OIDC) establishes trust relationships between existing identity providers without requiring custom development or replacement of the underlying authentication systems, making it the lowest-cost approach to combining disparate mechanisms already in place across the merged entity.
Concept tested: Federated identity for low-cost disparate authentication integration
Source: https://pages.nist.gov/800-63-3/sp800-63c.html
Topics
Community Discussion
No community discussion yet for this question.