Part $2$: High security federation incident response

Example Corp. is considering using Facebook Login to allow users to bring their own identity for its

customer support website. This would remove the need for Example Corp. to handle its own identity

management in most cases and is seen as an attractive option to remove expensive user support for

this type of account.

Answer the following questions:

Q$2$: What recommendations and advice would you provide to the implementation team?

Q$3$: What should Example Corp.$\text{'}$s incident response plan include to handle issues involving Facebook

Login?

Q$4$: Does using Facebook Login create more or less risk for Example Corp.? Why?