An organization is concerned that its IT help desk is receiving too many calls about...

In CompTIA Cloud+ (CV0-004) identity and access management objectives, SSO is commonly achieved through federated authentication, allowing users to authenticate once with an identity provider (IdP) and then access multiple applications without separate logins. SAML (Security Assertion Markup Language) is a widely used federation standard for SSO, especially for web-based and SaaS applications. With SAML, the IdP authenticates the user and sends a signed assertion to the service provider (the application), which then grants access. This reduces password fatigue and significantly cuts help desk calls for resets because users maintain one primary credential instead of many.

LDAP is a directory access protocol used to query and manage directory services, but it is not, by itself, an SSO federation mechanism for external SaaS. Kerberos supports SSO mainly within traditional on-premises Windows domain environments and is less common for cloud/SaaS federation without additional components. MFA strengthens authentication but does not provide SSO; it can complement SSO, not replace it. Therefore, SAML is the best recommendation.