What is the primary advantage of using SAML as an Identity Provider (IdP) over other SSO methods?

Question

Options

• ASAML provides support for single logout (SLO).
• BSAML allows for transparent authentication of Windows devices.
• CSAML offers stronger authentication mechanisms like RSA SecurID.
• DSAML provides integration with Microsoft Active Directory.

• A
  90% (36)
• B
  3% (1)
• C
  3% (1)
• D
  5% (2)

Explanation

SAML's defining advantage as an IdP is Single Logout (SLO) - when a user logs out of one service provider, SAML can propagate that logout signal to all other connected service providers simultaneously, which competing SSO protocols like OAuth 2.0 and OpenID Connect lack as a built-in standard feature.

Why the distractors are wrong:

• B describes Integrated Windows Authentication (IWA/Kerberos), not SAML - transparent Windows auth is a Windows ecosystem feature.
• C confuses the IdP layer with an authentication mechanism; RSA SecurID is a token/MFA product that can feed into many protocols, not something SAML specifically provides.
• D describes LDAP or ADFS capabilities - AD integration is a feature of the directory/federation server (like ADFS, which uses SAML), not of SAML itself.

Memory tip: Think of SAML's SLO as a "logout broadcast" - one logout, every door closes. The other choices all describe things that exist independently of SAML (Windows auth = Kerberos, strong tokens = MFA products, AD = LDAP/ADFS).

No community discussion yet for this question.