What provides the information to an application to make decisions about the authorization level appropriate when granting access?
What provides the information to an application to make decisions about the authorization level appropriate when granting access?
The identity provider supplies the necessary information regarding user identity and authentication status to the application, which may use this information to determine the appropriate authorization level. This ensures the application (relying party) can make informed access control decisions based on the data provided by the identity provider.
Application is the relaying party in the context of federation. The Identity Provider passes the information to the relaying party, which is the application. That's why D is correct
Thanks
it is the right one
The question talking about which system gives the tokens to be consumed by relying party/application.
Really confusing, as the Authorization is done by the "Relying Party" who is the one that needs to provide the Authrorization. The identity provider, passes the identification+Authentication. I understand your point, and I like the idea of thinking the Application = Relying Party, that way it is easier to point to the Identity Provider as the right answer.
My thought is B, "The relying party is any member of the federation that shares resources based on authenticated identities. Relying parties then handle authorization based on their policies. This allows a relying party to determine their level of trust in third-party IdPs and to map permissions on their own rather than relay on the IdP to provide both authentication and authorization. " From the CCSP Official Study Guide, Third Edition pg 181
I would have said B. The Identity Provider doesnt touch the application. The information comes from the relying party?
A relaying party may authorize a user’s request based on authorization attributes fetched from an IdP. Examples of authorization attributes include permissions/privileges assigned to the user or the user’s role. IdP provides the attributes, and answer is D.
In a federated identity scenario, the Identity Provider (IdP) supplies an assertion or token containing user identity data (often called claims). The application (relying party) then uses this information to make authorization decisions (i.e., what the user is allowed to do).