CAS-001 · Question #166
The <nameID> element in SAML can be provided in which of the following predefined formats? (Select TWO).
The correct answer is A. X.509 subject name D. Kerberos principal name. The SAML core specification defines a fixed set of predefined nameID formats that includes X.509 subject names and Kerberos principal names; PTR records, EV OID extensions, and WWN names are not part of the SAML specification.
Question
The <nameID> element in SAML can be provided in which of the following predefined formats? (Select TWO).
Options
- AX.509 subject name
- BPTR DNS record
- CEV certificate OID extension
- DKerberos principal name
- EWWN record name
How the community answered
(36 responses)- A89% (32)
- B6% (2)
- C3% (1)
- E3% (1)
Why each option
The SAML core specification defines a fixed set of predefined nameID formats that includes X.509 subject names and Kerberos principal names; PTR records, EV OID extensions, and WWN names are not part of the SAML specification.
X.509 subject name (urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName) is a predefined nameID format defined in the OASIS SAML core specification. It identifies principals using the subject distinguished name field from an X.509 certificate.
PTR records are DNS resource records used exclusively for reverse IP-to-hostname lookups and are not defined as a nameID format in any version of the SAML specification.
EV certificate OID extensions are policy fields within X.509 Extended Validation certificates that indicate CA issuance policy - they are not a defined SAML nameID format.
Kerberos principal name (urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos) is a predefined SAML 2.0 nameID format specified in the OASIS SAML core documentation. It allows a Kerberos realm-qualified principal name to serve as the identifier within a SAML assertion.
WWN (World Wide Name) is a unique identifier used in Fibre Channel storage area networking and has no definition or role as a SAML nameID format in any OASIS specification.
Concept tested: SAML nameID predefined format identifiers
Source: https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
Topics
Community Discussion
No community discussion yet for this question.