Which concept allows using the same credentials to access multiple networks or websites across different organizations, often via a single sign-on?

Which concept allows using the same credentials to access multiple networks or websites across different organizations, often via a single sign-on?

• A. Federated identity management.
• B. Input validation.
• C. Output encoding.
• D. Camouflage.

Answer: (A)

Federated identity management enables using the same credentials to access multiple networks or websites across organizations. In this approach, your home organization acts as the identity provider, vouching for who you are, and trusted service providers accept that proof to grant access to their resources. When you sign in, you receive a secure token or assertion (such as a SAML assertion or a JWT) that the connected services can verify. Because trust is established between organizations and standardized ways to exchange these assertions exist, you can move between different sites or applications without re-entering credentials, achieving true single sign-on. This also makes it easier to enforce consistent security policies, like multi-factor authentication, across all connected services. The other options focus on protecting data input, preventing injection issues, or disguising activity, which do not describe how credentials can be reused across multiple organizations.

Federated identity management enables using the same credentials to access multiple networks or websites across organizations. In this approach, your home organization acts as the identity provider, vouching for who you are, and trusted service providers accept that proof to grant access to their resources. When you sign in, you receive a secure token or assertion (such as a SAML assertion or a JWT) that the connected services can verify. Because trust is established between organizations and standardized ways to exchange these assertions exist, you can move between different sites or applications without re-entering credentials, achieving true single sign-on. This also makes it easier to enforce consistent security policies, like multi-factor authentication, across all connected services. The other options focus on protecting data input, preventing injection issues, or disguising activity, which do not describe how credentials can be reused across multiple organizations.