Study. uk . com
  1. Home
  2. All questions
  3. Question 356

CISSP study material · question 356 of 500

Two identity providers both issue tokens with the subject value "admin" and a relying party trusts both. Which requirement of RFC 7519 addresses this hazard?

  1. The subject value must be unique within the issuer's namespace or globally unique.
  2. The subject value must match the audience value for the token to be accepted.
  3. The subject value must always be a globally unique identifier such as a UUID.
  4. The subject value must be omitted where more than one issuer is trusted.
Show the answer

Answer: A. The subject value must be unique within the issuer's namespace or globally unique.

Uniqueness must hold either inside the issuer's own namespace or across all namespaces, so that claims can be attributed without ambiguity.

Source: RFC 7519 (IETF) — RFC 7519 > 4.1.2 sub (Subject) Claim

Challenge yourself on this topic → Study as cards