CCSP · Question #468
What provides the information to an application to make decisions about the authorization level appropriate when granting access?
The correct answer is D. Identity Provider. An Identity Provider (IdP) is responsible for authenticating users and supplying attribute and role information (claims/tokens) to relying applications. When an application needs to determine what level of access to grant, it consults the IdP's assertions-such as group…
Question
What provides the information to an application to make decisions about the authorization level appropriate when granting access?
Options
- AUser
- BRelying party
- CFederation
- DIdentity Provider
How the community answered
(57 responses)- A5% (3)
- B4% (2)
- C2% (1)
- D89% (51)
Explanation
An Identity Provider (IdP) is responsible for authenticating users and supplying attribute and role information (claims/tokens) to relying applications. When an application needs to determine what level of access to grant, it consults the IdP's assertions-such as group memberships or roles-to make that authorization decision. A relying party (B) is the application consuming that information, not producing it. Federation (C) is the framework that links identity systems, and the user (A) is the subject being authenticated, not the source of authorization metadata.
Topics
Community Discussion
No community discussion yet for this question.