Which term describes the set of processes that authorize user access to protected resources, while delegating authorization decisions to the applications themselves?

Which term describes the set of processes that authorize user access to protected resources, while delegating authorization decisions to the applications themselves?

• A. Access Management
• B. Authentication
• C. Authorization
• D. Single Sign-On

Answer: (A)

Access management covers how access to protected resources is controlled and how the authorization decisions are carried out at the application level. It encompasses authenticating the user, issuing the appropriate tokens or claims, and enforcing those permissions within each application or resource server. The key idea is that the central system handles policy and token issuance, while the applications themselves make the final access decisions based on the tokens or claims they receive. This separation—centralized access control with delegated enforcement at the resource/application layer—is what this term describes. Authentication focuses on proving identity, not on granting or enforcing access. Authorization is the actual decision to permit or deny access, but on its own it doesn’t capture the broader management and delegation to apps. Single Sign-On is about logging in once and accessing multiple apps without re-authenticating, not about how access to resources is authorized or enforced.

Access management covers how access to protected resources is controlled and how the authorization decisions are carried out at the application level. It encompasses authenticating the user, issuing the appropriate tokens or claims, and enforcing those permissions within each application or resource server. The key idea is that the central system handles policy and token issuance, while the applications themselves make the final access decisions based on the tokens or claims they receive. This separation—centralized access control with delegated enforcement at the resource/application layer—is what this term describes.

Authentication focuses on proving identity, not on granting or enforcing access. Authorization is the actual decision to permit or deny access, but on its own it doesn’t capture the broader management and delegation to apps. Single Sign-On is about logging in once and accessing multiple apps without re-authenticating, not about how access to resources is authorized or enforced.