GPEN · Question #344
Which of the following Web authentication techniques uses a single sign-on scheme?
The correct answer is B. Microsoft Passport authentication. Microsoft Passport authentication is a centralized single sign-on service that allows a user to authenticate once with Microsoft and gain access to multiple participating websites without re-entering credentials.
Question
Which of the following Web authentication techniques uses a single sign-on scheme?
Options
- ANTLM authentication
- BMicrosoft Passport authentication
- CBasic authentication
- DDigest authentication
How the community answered
(35 responses)- A3% (1)
- B83% (29)
- C3% (1)
- D11% (4)
Why each option
Microsoft Passport authentication is a centralized single sign-on service that allows a user to authenticate once with Microsoft and gain access to multiple participating websites without re-entering credentials.
NTLM is a challenge-response protocol used for authenticating users to Windows domain resources on a per-connection basis, with no mechanism to share authentication state across unrelated websites.
Microsoft Passport implements SSO by having the user authenticate once against a central Microsoft identity server, which then issues a token accepted by all participating sites. This token-based delegation is the defining characteristic of single sign-on - one authentication event grants transparent access across multiple independent services without repeated credential entry.
Basic authentication transmits Base64-encoded credentials directly to a single server on each request and provides no facility for sharing an authenticated session across multiple sites.
Digest authentication uses an MD5 challenge-response exchange to authenticate to one server per session and does not support cross-site authentication delegation or single sign-on.
Concept tested: Web single sign-on using Microsoft Passport authentication
Source: https://learn.microsoft.com/en-us/aspnet/web-forms/overview/older-versions-security/introduction/security-basics-and-asp-net-support-cs
Topics
Community Discussion
No community discussion yet for this question.