What is a step in the SAML SSO process?

Question

Options

• AThe IdP redirects the SAML response to the browser.
• BThe LDAP server extracts the assertion.
• CThe service provider issues an authentication challenge to the browser.
• DThe browser issues an HTTPS POST request to the IdP.

• A
  86% (38)
• B
  7% (3)
• C
  5% (2)
• D
  2% (1)

Explanation

In the SAML SSO flow, after the Identity Provider (IdP) authenticates the user, it creates a signed SAML assertion and embeds it in a SAML response. The IdP then redirects that response back to the user's browser (typically via an HTTP 302 redirect or an auto-submitting HTML form targeting the Service Provider's Assertion Consumer Service URL). Choice B is wrong because LDAP does not extract SAML assertions - the IdP may query LDAP to verify credentials, but LDAP plays no role in assertion processing. Choice C is wrong because the SP redirects the browser to the IdP rather than issuing an authentication challenge itself. Choice D describes the browser POSTing to the IdP, but it is actually the browser that POSTs the SAML response to the SP (not to the IdP).

No community discussion yet for this question.