Citrix
1Y0-440 · Question #58
A Citrix Architect needs to deploy SAML integration between NetScaler (Identity Provider) and ShareFile (Service Provider). The design requirements for SAML setup are as follows: NetScaler must be…
The correct answer is B. add authentication samlIDPProfile samlIDP -samlIdPCertName Cert_1 -samlIdPCertName Cert_2 -assertionConsumerServiceURL "https://sharefile.workspacelab.com/samlACS" -samlIssueName auth.workspacelab.com -signatureAlg RSA-SHA1 -digestMethod SHA1 -serviceProviderID sharefile.workspacelab.com". See the full explanation below for the reasoning.
Question
A Citrix Architect needs to deploy SAML integration between NetScaler (Identity Provider) and ShareFile (Service Provider). The design requirements for SAML setup are as follows:
NetScaler must be deployed as the Identity Provider (IdP).
ShareFile must be deployed as the Service Provider (SP).
The users in domain workspaceLab.com must be able to perform Single Sign-on to ShareFile after authenticating at the NetScaler.
The User ID must be UserPrincipalName.
NetScaler and Kerberos must be evaluated by NetScaler against the Active Directory servers SFO-ADS-001 and SFO-ADS-002.
After successful authentication, NetScaler creates a SAML Assertion and passes it back to ShareFile.
The configuration will be minimal.
SHA-1 algorithm must be utilized.
The verification environment details are as follows:
Domain Name: workspacelab.com
ShareFile URL: https://sharefile.workspacelab.com
ShareFile SP URL: https://sharefile.workspacelab.com
Which SAML IDP action will the design requirements meet?
Options
- Aadd authentication samlIDPProfile samlIDP_samlIDPCertName Cert_1 -samlIdPCertName Cert_2 -assertionConsumerServiceURL "https://auth.workspacelab.com/samlissueName auth.workspacelab.com -signatureAlg RSA-SHA256 -digestMethod SHA256 -encryptAssertion ON -serviceProviderID sharefile.workspacelab.com"
- Badd authentication samlIDPProfile samlIDP -samlIdPCertName Cert_1 -samlIdPCertName Cert_2 -assertionConsumerServiceURL "https://sharefile.workspacelab.com/samlACS" -samlIssueName auth.workspacelab.com -signatureAlg RSA-SHA1 -digestMethod SHA1 -serviceProviderID sharefile.workspacelab.com"
- Cadd authentication samlIDPProfile samlIDP -samlIdPCertName Cert_1 -samlIdPCertName Cert_2 -assertionConsumerServiceURL "https://sharefile.workspacelab.com/samlACS" -samlIssueName auth.workspacelab.com -signatureAlg RSA-SHA256 -digestMethod SHA256 -encryptAssertion ON -serviceProviderID sharefile.workspacelab.com"
- Dadd authentication samlIDPProfile samlIDP -samlIdPCertName Cert_1 -samlIdPCertName Cert_2 -assertionConsumerServiceURL "https://auth.workspacelab.com/samlACS" -samlIssueName sharefile.workspacelab.com -signatureAlg RSA-SHA1 -digestMethod SHA1 -encryptAssertion ON -serviceProviderID sharefile.workspacelab.com"
How the community answered
(38 responses)- A8% (3)
- B79% (30)
- C3% (1)
- D11% (4)
Community Discussion
No community discussion yet for this question.