問題文
An org authenticates its employees through an external identity provider. The security team asks how the platform's multi-factor authentication requirement can be satisfied. Which statement is correct?
選択肢
- Only a login flow can satisfy it.
- The platform always performs its own verification in addition to the provider's, and this cannot be avoided.
- The requirement does not apply to logins that arrive through single sign-on, and the identity provider has already established the user's identity and the platform treats such a session as already verified regardless of how the provider authenticated the user.
- Either the identity provider completes the verification and sends the platform the signals that indicate the method used, or the platform's own verification is used at login.