300-820 · Question #166
A Webex engineer is configuring SSO in Control Hub with Active Directory Federation Services. The engineer wants to authenticate users for all the applications that they are given rights to. The…
The correct answer is D. Map the E-mail-addresses LDAP attribute to the uid outgoing claim type. When configuring SSO between Webex Control Hub and Active Directory Federation Services (ADFS), ADFS must be told how to map user identity attributes into SAML assertion claims that Webex can understand. Webex specifically uses the 'uid' claim to identify users, and this uid…
Question
A Webex engineer is configuring SSO in Control Hub with Active Directory Federation Services. The engineer wants to authenticate users for all the applications that they are given rights to. The engineer also wants to eliminate further prompts when users switch applications during a particular session. Which action tells ADFS the fields to map to Webex to identify a user?
Options
- ASend LDAP attributes as claims.
- BCreate claim rules for Webex authentication
- CAdd a relying party trust to the ADFS.
- DMap the E-mail-addresses LDAP attribute to the uid outgoing claim type.
How the community answered
(29 responses)- B3% (1)
- C3% (1)
- D93% (27)
Explanation
When configuring SSO between Webex Control Hub and Active Directory Federation Services (ADFS), ADFS must be told how to map user identity attributes into SAML assertion claims that Webex can understand. Webex specifically uses the 'uid' claim to identify users, and this uid must correspond to the user's email address. The correct action is to map the 'E-mail-Addresses' LDAP attribute to the 'uid' outgoing claim type in the ADFS claim rule configuration. This is the specific mapping that tells ADFS which directory attribute to send as the user identifier in the SAML assertion. The other options (adding a relying party trust, sending LDAP attributes generically, creating generic claim rules) are broader steps that don't specifically address the identity field mapping Webex requires.
Topics
Community Discussion
No community discussion yet for this question.