Associate Cloud Workspace Administrator · Free Practice Question Medium
Question 5
A large organization with multiple departments is using Google Workspace. The HR department has its own set of proprietary web applications for HR-related tasks. They require single sign-on (SSO) capabilities with Google Workspace to streamline access without compromising security. As a Google Workspace Super Admin, how should you integrate these applications?
-
A
Provide HR staff with admin privileges to manage their own SSO settings.
-
B
Create individual user accounts for the HR web applications in Google Admin.
-
C
Utilize OAuth 2.0 for the web applications to access Google Workspace APIs.
-
D
Enable Security Assertion Markup Language (SAML) based SSO for the HR web applications.
Reveal correct answer
Correct answer: D
A. Providing HR staff with admin privileges to manage their own SSO settings is not the best approach as it can lead to security risks and potential misconfigurations. It is important for the Google Workspace Super Admin to centrally manage and control SSO settings to ensure consistency and security across the organization.
B. Creating individual user accounts for the HR web applications in Google Admin is not the recommended approach for integrating HR applications with Google Workspace for SSO. This method would require users to manage multiple sets of credentials, defeating the purpose of single sign-on and increasing the risk of security breaches.
C. Utilizing OAuth 2.0 for the web applications to access Google Workspace APIs is not the correct choice for integrating HR web applications with Google Workspace for SSO capabilities. OAuth 2.0 is primarily used for authorization and access delegation, not for implementing single sign-on functionality.
D. Enabling Security Assertion Markup Language (SAML) based SSO for the HR web applications is the correct choice because SAML allows for secure communication between the identity provider (Google Workspace) and the service provider (HR web applications). This integration ensures that users can access the HR applications with their Google Workspace credentials without compromising security.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
