CCSP · Question #632
Within a federated identity system, which entity accepts tokens from the identity provider?
The correct answer is D. Relying party. In a federated identity architecture, the Identity Provider (IdP) authenticates the user and issues a security token (e.g., SAML assertion, OAuth token). The Relying Party (RP) - also called the Service Provider (SP) - is the application or service that accepts and trusts that to
Question
Within a federated identity system, which entity accepts tokens from the identity provider?
Options
- AAssertion manager
- BServicing party
- CProxy party
- DRelying party
How the community answered
(26 responses)- A8% (2)
- B4% (1)
- D88% (23)
Explanation
In a federated identity architecture, the Identity Provider (IdP) authenticates the user and issues a security token (e.g., SAML assertion, OAuth token). The Relying Party (RP) - also called the Service Provider (SP) - is the application or service that accepts and trusts that token to grant the user access. The term 'relying party' reflects the fact that this entity relies on the IdP's assertion rather than performing its own authentication. There is no standard role called 'assertion manager,' 'servicing party,' or 'proxy party' in federated identity frameworks.
Topics
Community Discussion
No community discussion yet for this question.