Salesforce Certified Identity and Access Management Practice

What is crucial to include in an SSO configuration for user security across orgs?

1. Shared passwords

2. Master list of usernames

3. Unique Federated ID for each user

4. Public authentication endpoint

The correct answer is: Unique Federated ID for each user

Including a unique Federated ID for each user in an SSO configuration is essential for maintaining user security across different organizations. A unique Federated ID allows the identity provider to distinctly recognize and authenticate each user, even if other identifiers, like usernames or email addresses, overlap across systems. This uniqueness is vital to prevent unauthorized access, data breaches, and identity confusion that could arise from shared usernames or passwords across multiple services. Using a unique Federated ID helps ensure that access rights and user attributes are properly managed and that each user's session can be accurately tracked and governed. This setup not only enhances security by providing a clear link between an identity and its corresponding permissions but also facilitates easier auditing and management of user identities across different platforms. While shared passwords, a master list of usernames, or a public authentication endpoint may sound helpful, they do not provide the same level of granularity and security that a unique identifier offers. Shared passwords can lead to vulnerabilities if credentials are exposed; a master list of usernames could become a target for attackers; and public authentication endpoints, while useful for connectivity, do not inherently manage security unless tied to unique identifiers for each user.