An organization that utilizes single sign-on has a primary domain and three secondary domains. Which of the following statements will be true of this scenario? (Choose two.)

Question

A. The secondary domains need to trust the primary domain to protect the authentication credentials used to verify the end user identity to the secondary domains for authorized use.
B. The primary domain needs to trust the secondary domains to protect the authentication credentials used to verify the end user identity to the primary domain for authorized use.
C. The secondary domains will assert the identity and authentication credentials to the primary domain on behalf of the user.
D. The primary domain will assert the identity and authentication credentials to the secondary domains on behalf of the user.

Answer 1

A, D
Explanation: Significant security aspects of the single sign-on model are:
• The secondary domains have to trust the primary domain to:
o Correctly assert the identity and authentication credentials of the end user
o Protect the authentication credentials used to verify the end user identity to the secondary domain from unauthorized use
• The authentication credentials have to be protected when transferred between the primary and secondary domains against threats arising from interception or eavesdropping leading to possible masquerade attacks.