A Webex administrator is configuring the Webex Control Hub to enable enterprise users to sign into Webex securely by authenticating to the IdP of the organization. To conform to the SAML…

The correct answer is C. urn:oasis:names:tc:SAML:2.0:nameid-format:transient. When configuring SAML-based SSO in Cisco Webex Control Hub, the NameID format must conform to the SAML 2.0 specification. The transient format ('urn:oasis:names:tc:SAML:2.0:nameid-format:transient') is a SAML 2.0-compliant NameID format supported by Webex, where the identifier…

Cisco Webex Core Components

Question

A Webex administrator is configuring the Webex Control Hub to enable enterprise users to sign into Webex securely by authenticating to the IdP of the organization. To conform to the SAML specification, to what can the NameID format be set?

Options

Aurn:oasis:names:tc:SAML:2.0:nameid-format:unspecified
Burn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Curn:oasis:names:tc:SAML:2.0:nameid-format:transient
Durn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

How the community answered

(40 responses)

A
3% (1)
C
93% (37)
D
5% (2)

Explanation

When configuring SAML-based SSO in Cisco Webex Control Hub, the NameID format must conform to the SAML 2.0 specification. The transient format ('urn:oasis:names:tc:SAML:2.0:nameid-format:transient') is a SAML 2.0-compliant NameID format supported by Webex, where the identifier is temporary and session-specific, enhancing user privacy. Options B and D both list the SAML 1.1 emailAddress format - while emailAddress is commonly used, the question asks specifically about SAML specification conformance for this Control Hub configuration, for which the transient format (SAML 2.0) is the correct answer as confirmed by Cisco's SSO implementation guidance.

Topics

#SAML SSO#Webex Control Hub#Identity Provider#NameID format

Community Discussion

No community discussion yet for this question.

Full 300-820 Practice