CV0-002 · Question #560
A cloud administrator is troubleshooting SSO issues with an application server. The application server sits behind a load balancer device with WAF and reverse proxy services enabled. Which of the…
The correct answer is B. Multifactor. To resolve Single Sign-On (SSO) issues, the administrator should ensure that multifactor authentication (MFA) is disabled, as MFA often introduces additional verification steps that can interfere with the seamless, automated authentication flow of SSO.
Question
A cloud administrator is troubleshooting SSO issues with an application server. The application server sits behind a load balancer device with WAF and reverse proxy services enabled. Which of the following authentication types should the administrator ensure is disabled to allow SSO functions?
Options
- AAnonymous
- BMultifactor
- CKerberos
- DBasic
How the community answered
(31 responses)- A3% (1)
- B71% (22)
- C10% (3)
- D16% (5)
Why each option
To resolve Single Sign-On (SSO) issues, the administrator should ensure that multifactor authentication (MFA) is disabled, as MFA often introduces additional verification steps that can interfere with the seamless, automated authentication flow of SSO.
Anonymous authentication allows access without credentials and is unrelated to SSO functionality, which relies on identified users.
Multifactor authentication requires users to provide two or more verification factors, such as a password and a code from an authenticator app, which adds an extra step that can disrupt the automated token or cookie exchange mechanisms used by SSO to achieve a seamless login experience across applications. Temporarily disabling MFA can help isolate if it is the cause of SSO failure.
Kerberos is an authentication protocol often used with SSO, particularly in on-premises environments, and would typically be enabled, not disabled, for SSO.
Basic authentication is a simple challenge-response mechanism that sends credentials unencrypted (unless over HTTPS) and does not inherently conflict with SSO, although SSO typically uses more advanced token-based methods.
Concept tested: Troubleshooting SSO and MFA conflicts
Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks
Topics
Community Discussion
No community discussion yet for this question.