Reducing SaaS Credentials with Domain Authentication

SY0-701 By islever Editorial Last updated

Given a scenario, implement and maintain identity and access management.

Short answer

A Single Sign-On (SSO) allows employees to use their existing domain credentials to access multiple SaaS applications without maintaining separate accounts.

Question

A data administrator is configuring authentication for a SaaS application and would like to reduce the number of credentials employees need to maintain. The company prefers to use domain credentials to access new SaaS applications. Which of the following methods would allow this functionality?
  1. SSO Correct Answer
  2. LEAP
  3. MFA
  4. PEAP

Key Takeaways

The question tests knowledge of identity management solutions, specifically how SSO leverages existing domain credentials to streamline access to SaaS apps.

Single Sign-On (SSO) allows users to authenticate once and access multiple applications, reducing the number of credentials employees need to maintain.

Common mistake: Confusing authentication protocols like LEAP or PEAP with identity aggregation services; these secure network access but do not provide cross-application single sign-on.

Expert Analysis

Why the Answer Is Correct

Single Sign-On (SSO) is an authentication scheme that allows a user to log in with a single ID and password to relate software systems with different, yet related, accounts. By using SSO, the company can leverage existing Active Directory or LDAP domain credentials for new SaaS applications, eliminating the need for separate usernames and passwords for each service.

Why the Other Options Are Wrong

LEAP (Lightweight Extensible Authentication Protocol) and PEAP (Protected Extensible Authentication Protocol) are specific methods used for wireless network authentication (802.1X), not for application-level access aggregation. MFA (Multi-Factor Authentication) adds security layers (something you know, have, or are) but does not inherently reduce the number of credentials needed; it often requires managing additional tokens or devices.

Community Comment Notes

Community consensus strongly supports SSO as the correct answer. Users noted that SSO enables users to 'authenticate once' and 'access multiple applications,' directly addressing the goal of reducing credential maintenance. One commenter clarified that while other options are security protocols, only SSO provides the single-login functionality described.

Exam Strategy

When a question mentions 'reducing credentials,' 'single login,' or 'domain credentials' for multiple apps, immediately look for Single Sign-On (SSO). Distinguish between network access protocols (like PEAP/LEAP) and application identity management (SSO/SAML/OIDC).

Frequently Asked Questions

Why isn't MFA the answer if it secures domain credentials?

MFA adds security steps but doesn't reduce the number of credentials. The question asks to 'reduce the number of credentials,' which SSO achieves by centralizing authentication.

Can PEAP be used for SaaS application login?

No. PEAP is an authentication protocol primarily used for securing Wi-Fi connections (802.1X). It does not aggregate identities across different web-based SaaS platforms.

More SY0-701 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 12 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 12

  1. lauren2wright 👍 14
    A. SSO (Single Sign-On) Single Sign-On (SSO) enables users to authenticate once with their domain credentials and then access multiple applications without needing to re-enter their credentials each time. This aligns with the company's preference to use domain credentials and reduces the burden of managing multiple sets of credentials for different applications.
  2. dbrowndiver 👍 3
    SSO (Single Sign-On) is the method that allows users to access multiple applications with a single set of credentials, typically the same credentials they use to access their domain or network. This is the best choice for reducing the number of credentials employees need to maintain while still providing access to new SaaS applications using their existing domain credentials. What is SSO? SSO (Single Sign-On) is an authentication process that allows users to log in once with a single set of credentials to access multiple applications or systems. Once authenticated, users can navigate between various services without needing to log in again, as long as the applications support SSO. Why it fits the scenario: By implementing SSO, employees can use their domain credentials to access the SaaS application, eliminating the need for separate credentials for each application. This simplifies the user experience and reduces the administrative burden of managing multiple passwords, which aligns with the company's preference for using domain credentials.
  3. JackExam2025 👍 2 Answered A
    SSO allows users to authenticate once with their domain credentials and then access multiple applications without needing to log in again for each one. This helps reduce the number of credentials employees need to manage
  4. JRCHENRY 👍 2 Answered A
    It's a technology that allows users to access multiple applications and websites with a single set of login credentials.
  5. Etc_Shadow28000 👍 1 Answered A
    SSO is the only option allowing for less login occurrences. The other options reflect security protocols
Show 7 more comments
  1. Hasss 👍 1 Answered A
    sso- allows employees to only have to sign in once with out need to renter their passwords every time.
  2. Lance711 👍 1
    Is SSO not more insecure than something like MFA? The more credentials needed, the more secure no?
  3. 88d4601 👍 1 Answered A
    SSO is the right answer
  4. CJMax01 👍 1
    A. SSO (Single Sign-On)
  5. AryzBeats 👍 1 Answered A
    Single sign on - sso
  6. FrozenCarrot 👍 1 Answered A
    Single Sign-On
  7. vdrmz 👍 1 Answered A
    A. SSO

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide