CAS-003 · Question #524
An enterprise is trying to secure a specific web-based application by forcing the use of multifactor authentication. Currently, the enterprise cannot change the application's sign-in page to include…
The correct answer is D. Deploying Shibboleth to all web-based applications in the enterprise. Shibboleth is a federated identity method based on SAML that is often employed by universities or public service organizations. In a Shibboleth implementation, a user attempts to retrieve resources from a Shibbolethenabled website, which then sends SAML authentication…
Question
An enterprise is trying to secure a specific web-based application by forcing the use of multifactor authentication. Currently, the enterprise cannot change the application's sign-in page to include an extra field. However, the web-based application supports SAML. Which of the following would BEST secure the application?
Options
- AUsing an SSO application that supports mutlifactor authentication
- BEnabling the web application to support LDAP integration
- CForcing higher-complexity passwords and frequent changes
- DDeploying Shibboleth to all web-based applications in the enterprise
How the community answered
(38 responses)- A13% (5)
- B5% (2)
- C3% (1)
- D79% (30)
Explanation
Shibboleth is a federated identity method based on SAML that is often employed by universities or public service organizations. In a Shibboleth implementation, a user attempts to retrieve resources from a Shibbolethenabled website, which then sends SAML authentication information over URL queries. The user is then redirected to an identity provider with which they can authenticate using this SAML information. The identity provider then responds to the service provider (the Shibboleth-enabled website) with the proper authentication information. The site validates this response and grants the user access to certain resources based on their SAML
Topics
Community Discussion
No community discussion yet for this question.