Y2-P04 · Phase 4 of 8

SSO & Federation

Understand single sign-on, SAML, OAuth 2.0, and OIDC federation concepts.

SSOSAMLOAuth 2.0OIDCFederationIdPSPClaimsTokens

Objectives

  • 1.Explain SSO and its business value
  • 2.Understand SAML assertions and claims
  • 3.Explain OAuth 2.0 authorization flow
  • 4.Understand OIDC as an identity layer on OAuth
  • 5.Diagram a federated authentication flow

Student Outcomes

  • Explain SSO, SAML, OAuth 2.0, and OIDC
  • Diagram federated authentication flows
  • Distinguish IdP from SP
  • Understand token types and claims

Evidence Requirements

  • SSO architecture diagram
  • Federation flow documentation
  • SAML/OAuth/OIDC comparison table
  • Claim mapping exercise

Acceptance Criteria

  • Student can explain SSO and federation
  • Student diagrams authentication flows correctly
  • Student distinguishes SAML, OAuth, and OIDC

Evidence & Scoring

Passing: 80%

Tutor — Y2-P04

Tutor Offline. Ollama is not running. Install from ollama.com, then run ollama serve and ollama pull llama3.1.

Ask the tutor a question about your current lab.

The tutor uses progressive hints — it won't give you the answer immediately.