304 · Question #105
When configuring SAML as an SP, which component is responsible for initiating the SAML authentication request to the IdP?
The correct answer is C. Service Provider (SP). When configuring SAML as a Service Provider (SP), the SP itself initiates the authentication flow by redirecting the user to the Identity Provider with a SAML AuthnRequest - making C correct. The ACS (A) is the SP's endpoint that receives the SAML response from the IdP after…
Question
When configuring SAML as an SP, which component is responsible for initiating the SAML authentication request to the IdP?
Options
- AAssertion Consumer Service (ACS)
- BIdentity Provider (IdP)
- CService Provider (SP)
- DSecurity Assertion Markup Language (SAML)
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- C89% (25)
Explanation
When configuring SAML as a Service Provider (SP), the SP itself initiates the authentication flow by redirecting the user to the Identity Provider with a SAML AuthnRequest - making C correct. The ACS (A) is the SP's endpoint that receives the SAML response from the IdP after authentication, not the initiator. The IdP (B) is the authenticating authority that responds to the request, but it doesn't start the flow in SP-initiated SSO. SAML (D) is the protocol/standard itself, not a component that performs any action. A helpful memory tip: think of the SP as the "bouncer" - when a user tries to access a protected resource, the SP stops them and sends them to the IdP to prove their identity before granting access.
Topics
Community Discussion
No community discussion yet for this question.