Certified Identity And Access Manager (CIAM) Practice Exam

Single Sign-On is the centralized mechanism that lets a user authenticate once and then access multiple services within the same realm without re-entering credentials. In practice, an identity provider handles the login and issues a trusted token or session. Service providers within the realm accept that token to authorize access, so the user can move between different applications seamlessly. This reduces password prompts and creates a consistent, secure gateway for access. Access Management describes the policies and enforcement around who can access which resources, not the single-login flow itself. Identity Store is simply where credentials and identities are stored. Federation covers establishing trust between separate domains to allow cross-domain SSO, which is broader and often involves multiple realms. Within a single realm, the term that best matches the described mechanism is Single Sign-On.