nerdexam
(ISC)2

CCSP · Question #632

Within a federated identity system, which entity accepts tokens from the identity provider?

The correct answer is D. Relying party. In a federated identity architecture, the Identity Provider (IdP) authenticates the user and issues a security token (e.g., SAML assertion, OAuth token). The Relying Party (RP) - also called the Service Provider (SP) - is the application or service that accepts and trusts that to

Submitted by mike_84· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

Within a federated identity system, which entity accepts tokens from the identity provider?

Options

  • AAssertion manager
  • BServicing party
  • CProxy party
  • DRelying party

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • D
    88% (23)

Explanation

In a federated identity architecture, the Identity Provider (IdP) authenticates the user and issues a security token (e.g., SAML assertion, OAuth token). The Relying Party (RP) - also called the Service Provider (SP) - is the application or service that accepts and trusts that token to grant the user access. The term 'relying party' reflects the fact that this entity relies on the IdP's assertion rather than performing its own authentication. There is no standard role called 'assertion manager,' 'servicing party,' or 'proxy party' in federated identity frameworks.

Topics

#Federated Identity#Identity Provider#Relying Party#Security Tokens

Community Discussion

No community discussion yet for this question.

Full CCSP Practice