nerdexam
(ISC)2

CCSP · Question #216

A federated identity system is composed of three main components. Which of the following is NOT one of the three main components?

The correct answer is D. API. A federated identity system primarily consists of an Identity Provider, a User, and a Relying Party; an API is a communication method, not a core architectural component.

Submitted by minji_kr· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

A federated identity system is composed of three main components. Which of the following is NOT one of the three main components?

Options

  • AIdentity provider
  • BUser
  • CRelying party
  • DAPI

How the community answered

(69 responses)
  • A
    7% (5)
  • B
    3% (2)
  • C
    4% (3)
  • D
    86% (59)

Why each option

A federated identity system primarily consists of an Identity Provider, a User, and a Relying Party; an API is a communication method, not a core architectural component.

AIdentity provider

The Identity Provider is a core component responsible for authenticating users and asserting their identity.

BUser

The User (or subject) is a core component representing the individual requesting access to resources.

CRelying party

The Relying Party (or Service Provider) is a core component that trusts the Identity Provider's assertions to grant access to resources.

DAPICorrect

An API (Application Programming Interface) is a set of defined methods for software components to communicate, which may be utilized within or between the components of a federated identity system (e.g., using SAML or OIDC APIs) but is not considered one of the three primary architectural roles or entities in the system itself.

Concept tested: Federated identity system components

Source: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis

Topics

#Federated Identity#Identity Management#Identity Provider#Relying Party

Community Discussion

No community discussion yet for this question.

Full CCSP Practice