A new resident-services portal grants guest access to all modules whenever the identity provider is unreachable. What secure-design change should the architect require?
Select an answer to reveal the explanation.
Short Explanation
When the badge reader dies, you don’t prop the vault open for “guest mode.” Fail securely means no verified identity, no access—even if that means a temporary outage message instead of a free-for-all.
Full Explanation
Secure defaults and fail-secure behavior deny access when critical security services such as an IdP are unavailable. Failing open to guest privileges converts an availability incident into a confidentiality and integrity breach. Client-side credential caching and suppressed logging worsen the outage risk profile.