What is the primary benefit of federation in cloud identity management?

• A. Single Sign-On
• B. Centralized authentication
• C. Identity brokering
• D. Password synchronization

Answer: (A)

Federation enables users to authenticate once with a trusted identity provider and then access multiple cloud services without re-entering credentials. This single login experience is the primary benefit because the identity provider vouches for the user across all connected service providers, allowing seamless access to each application without repeated sign-ins.

While centralized authentication can seem related, federation’s strength lies in enabling trust across domains so one authentication event unlocks many services, rather than forcing every app to rely on the same login point. Identity brokering is a part of how federation works—translating identities between domains—but the standout user-facing advantage is the seamless Single Sign-On. Password synchronization isn’t required for federation; tokens or assertions from the IdP grant access without needing to mirror passwords across systems.