Exam CAS-004 topic 1 question 281 discussion

This is federation. SSO is single credentials to access multiple applications or resources within a single domain/org, whereas federation allows single sign on to application across multiple domains or organization. Since the subsidiaries have independent infrastructures, this is federation.

Given the scenario where the bank's support teams need access to multiple subsidiaries' infrastructures with a unified credential approach, Federation (Option B) emerges as the BEST choice. It allows for seamless authentication across different organizational boundaries (subsidiaries) while maintaining security and autonomy.

SSO: Primarily focuses on allowing a user to log in once and access multiple applications within a single organization. Federation: Extends the concept to enable users to access resources across multiple organizations, each with its own identity provider.

Look at "Independent Infrastructures" in this question. "Federated Identity vs SSO Although you may hear SSO and FIM frequently used together, they are not synonymous. Single sign-on enables access to applications and resources within a single domain. Federated identity management enables single-sign on to applications across multiple domains or organizations." https://www.pingidentity.com/en/resources/blog/post/sso-vs-federated-identity-management.html#:~:text=across%20company%20lines.-,Federated%20Identity%20vs%20SSO,across%20multiple%20domains%20or%20organizations.

The BEST way to achieve the goal of using a single set of credentials for managing multiple subsidiaries with independent infrastructures is: B. Federation Federation enables the bank's support teams to use a single set of credentials to access and manage multiple independent environments (subsidiaries). It allows for a centralized authentication system where users can log in once, and their credentials are securely shared across different systems or domains. Federation ensures that each subsidiary retains its autonomy and independent infrastructure while still allowing seamless and secure access for the support teams across all environments. This is a more secure and efficient approach compared to using shared credentials (Option D), which can lead to numerous security and accountability issues. Chat GPT has spoken

SSO is defined as single set of credentials for more than one thing