Which of the following does "federation" most likely refer to within the context of identity and access management?

Question

Options

• AFacilitating groups of users in a similar function or profile to system access that requires elevated
• BAn authentication mechanism that allows a user to utilize one set of credentials to access multiple
• CUtilizing a combination of what you know who you are, and what you have to grant authentication
• DCorrelating one's identity with the attributes and associated applications the user has access to

• A
  6% (2)
• B
  88% (30)
• C
  3% (1)
• D
  3% (1)

Explanation

Federation in Identity and Access Management

Why B is Correct: Federation refers to a trust relationship between identity providers and service providers that allows users to authenticate once and gain access to multiple systems or applications using a single set of credentials - this is the core concept of federated identity (e.g., logging into a third-party app using your Google or Microsoft account).

Why the Distractors Are Wrong:

• Option A describes Role-Based Access Control (RBAC), where users are grouped by function and granted appropriate access levels - not federation.
• Option C describes Multi-Factor Authentication (MFA), which combines something you know, something you are, and something you have - a separate concept entirely.
• Option D describes Identity Provisioning or an Identity Management System, which maps user attributes to their associated applications and entitlements.

Memory Tip: Think of federation like a passport - one document (credential) issued by your home country (identity provider) that is trusted and recognized by multiple other countries (service providers), granting you access without needing separate credentials everywhere. If you remember "one credential, many systems," you'll always identify federation correctly.

No community discussion yet for this question.