What role does a central identity provider play in RBAC for multiple apps?

• A. It stores backups of user data.
• B. It blocks all external app integrations.
• C. It defines roles and propagates them to connected apps.
• D. It manages only device compliance.

Answer: (C)

In RBAC across multiple apps, a central identity provider serves as the source of truth for user roles and permissions and distributes those roles to every connected application. It defines what roles exist, what those roles are allowed to do, and then maps or propagates those definitions to each app (often through standards like SAML, OAuth/OIDC, or SCIM). This enables consistent access control and single sign-on, so when a user’s role changes in the IDP, the updated permissions apply across all apps automatically.

Storing backups of user data isn’t the IDP’s job, nor is blocking all external app integrations, and managing device compliance is handled by separate security controls.