Which statement correctly matches the roles of SAML, OAuth, and OpenID Connect in cloud identity?

Which statement correctly matches the roles of SAML, OAuth, and OpenID Connect in cloud identity?

• A. OpenID Connect adds authentication on top of OAuth.
• B. SAML enables SSO for user authentication; OAuth authorizes access to resources; OpenID Connect adds authentication on top of OAuth.
• C. OAuth enables SSO; SAML provides authorization; OpenID Connect eliminates authentication.
• D. SAML enables SSO; OAuth handles file sharing; OpenID Connect handles network routing.

Answer: (B)

SAML, OAuth, and OpenID Connect each serve a distinct role in cloud identity. SAML is used to provide single sign-on (SSO) and user authentication across trusted domains, enabling a user to sign in once and access multiple services. OAuth is a framework for authorization, allowing apps to access specific resources on behalf of a user without sharing credentials. OpenID Connect builds on top of OAuth 2.0 to supply authentication and identity information, effectively adding an identity layer to OAuth. So, the best statement maps to: SAML enables SSO for user authentication; OAuth authorizes access to resources; OpenID Connect adds authentication on top of OAuth. The other options either omit SAML’s SSO role, misstate what OAuth does, or mischaracterize OpenID Connect.

SAML, OAuth, and OpenID Connect each serve a distinct role in cloud identity. SAML is used to provide single sign-on (SSO) and user authentication across trusted domains, enabling a user to sign in once and access multiple services. OAuth is a framework for authorization, allowing apps to access specific resources on behalf of a user without sharing credentials. OpenID Connect builds on top of OAuth 2.0 to supply authentication and identity information, effectively adding an identity layer to OAuth.

So, the best statement maps to: SAML enables SSO for user authentication; OAuth authorizes access to resources; OpenID Connect adds authentication on top of OAuth. The other options either omit SAML’s SSO role, misstate what OAuth does, or mischaracterize OpenID Connect.