In Snowflake, the use of federated authentication enables which Single Sign-On (SSO) workflow activities? (Choose two.)
In Snowflake, the use of federated authentication enables which Single Sign-On (SSO) workflow activities? (Choose two.)
In Snowflake, federated authentication enables Single Sign-On (SSO) workflow activities specifically related to initiating user sessions and logging into Snowflake. When federated authentication is used, it allows users to start their sessions by verifying their credentials through an external identity provider, which is an essential part of the SSO workflow. Additionally, logging into Snowflake is directly facilitated by this authentication mechanism, allowing SSO capabilities so that users can access Snowflake environments through a unified and secure login process managed by an external identity provider. These activities streamline session initiation and login processes, enhancing both user convenience and security.
The correct Answer is C and D. Federated authentication enables the following SSO workflows: Logging into Snowflake. Logging out of Snowflake. System timeout due to inactivity. https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-overview#supported-sso-workflows
CD correct - https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-overview
answer is C&D
BC is correct B. Initiating user sessions: Federated authentication allows users to initiate their sessions in Snowflake using credentials managed by an external identity provider. This is a key part of the SSO workflow, where user authentication is handled outside Snowflake but permits session creation within Snowflake once authentication is successfully verified. C. Logging into Snowflake: This is the primary activity enabled by federated authentication. Users log into Snowflake using SSO capabilities provided through federated authentication with an IdP, such as Okta, Azure AD, or any other SAML 2.0 compliant provider. This process simplifies the login procedure and enhances security by centralizing user credentials and authentication processes through a trusted third party.