Question
A user reports some single sign-on errors to a help desk technician. Currently, the user is able to sign in to the company's application portal but cannot access a specific SaaS-based tool. Which of the following would the technician most likely suggest as a next step?
- A. Reenroll the user's mobile device to be used as an MFA token.
- B. Use a private browsing window to avoid local session conflicts. Correct
- C. Bypass single sign-on by directly authenticating to the application.
- D. Reset the device being used to factory defaults.
Explanation
The user can sign in to the portal, so the SSO identity and MFA are working; a failure to reach one SaaS app often comes from stale cookies, cached tokens or a conflicting session in the browser. Opening a private browsing window starts a clean session without cached data and is a quick, low-impact next step. Reenrolling MFA is unnecessary because sign-in works, bypassing SSO defeats the organisation's authentication controls, and a factory reset is far too drastic.
