300-810 · Question #299
What is the purpose of the SAML protocol?
The correct answer is B. to exchange authentication information between an identity provider and a service provider. SAML (Security Assertion Markup Language) is an open XML-based standard designed to exchange authentication and authorization data between two parties: an Identity Provider (IdP), which authenticates the user, and a Service Provider (SP), which grants access to a resource or…
Question
What is the purpose of the SAML protocol?
Options
- Ato share information about usernames and passwords between the applications on a network
- Bto exchange authentication information between an identity provider and a service provider
- Cto securely encrypt authentication information between a client and a server
- Dto send authentication, authorization, and accounting information to an identity provider
How the community answered
(38 responses)- B92% (35)
- C3% (1)
- D5% (2)
Explanation
SAML (Security Assertion Markup Language) is an open XML-based standard designed to exchange authentication and authorization data between two parties: an Identity Provider (IdP), which authenticates the user, and a Service Provider (SP), which grants access to a resource or application. It enables Single Sign-On (SSO) by allowing the IdP to assert a user's identity to the SP without the SP ever handling the user's credentials directly. Option A is incorrect because SAML does not share passwords - it passes signed assertions. Option C is incorrect because SAML is not an encryption protocol. Option D describes RADIUS/TACACS+, not SAML.
Topics
Community Discussion
No community discussion yet for this question.