Y2-P04 · Phase 4 of 8
SSO & Federation
Understand single sign-on, SAML, OAuth 2.0, and OIDC federation concepts.
SSOSAMLOAuth 2.0OIDCFederationIdPSPClaimsTokens
Objectives
- 1.Explain SSO and its business value
- 2.Understand SAML assertions and claims
- 3.Explain OAuth 2.0 authorization flow
- 4.Understand OIDC as an identity layer on OAuth
- 5.Diagram a federated authentication flow
Student Outcomes
- Explain SSO, SAML, OAuth 2.0, and OIDC
- Diagram federated authentication flows
- Distinguish IdP from SP
- Understand token types and claims
Evidence Requirements
- •SSO architecture diagram
- •Federation flow documentation
- •SAML/OAuth/OIDC comparison table
- •Claim mapping exercise
Acceptance Criteria
- Student can explain SSO and federation
- Student diagrams authentication flows correctly
- Student distinguishes SAML, OAuth, and OIDC
Evidence & Scoring
Passing: 80%
Tutor — Y2-P04
Tutor Offline. Ollama is not running. Install from ollama.com, then run
ollama serve and ollama pull llama3.1.Ask the tutor a question about your current lab.
The tutor uses progressive hints — it won't give you the answer immediately.