Question

A company wants employees to log in once with their corporate credentials and then access multiple third-party SaaS applications without re-entering passwords. The identity provider must send authentication assertions to the external service providers using an XML-based standard. Which solution best meets these requirements?

Accepted Answer

Implement SAML-based federation between the corporate identity provider and the SaaS service providers

Answer

Deploy a local password vault on each workstation to auto-fill credentials for each application

Answer

Configure RADIUS authentication on the corporate wireless network for all users

Answer

Enable Kerberos ticket-granting within the on-premises Active Directory domain