A trust relationship has been established between two organizations with web based services. One organization is acting as the Requesting Authority (RA) and the other acts as the Provisioning…

The correct answer is A. The trust relationship uses SAML in the SOAP header. In web services provisioning, SPML (Service Provisioning Markup Language) uses SOAP as its transport protocol to carry provisioning messages between the Requesting Authority and the Provisioning Service Provider. To establish and convey trust (identity assertions and…

Technical Integration of Enterprise Components

Question

A trust relationship has been established between two organizations with web based services. One organization is acting as the Requesting Authority (RA) and the other acts as the Provisioning Service Provider (PSP). Which of the following is correct about the trust relationship?

Options

AThe trust relationship uses SAML in the SOAP header.
BThe trust relationship uses XACML in the SAML header.
CThe trust relationship uses SPML in the SOAP header.
DThe trust relationship uses SPML in the SAML header.

How the community answered

(14 responses)

A
71% (10)
C
21% (3)
D
7% (1)

Explanation

In web services provisioning, SPML (Service Provisioning Markup Language) uses SOAP as its transport protocol to carry provisioning messages between the Requesting Authority and the Provisioning Service Provider. To establish and convey trust (identity assertions and authentication tokens) between the two organizations, SAML (Security Assertion Markup Language) assertions are embedded in the SOAP header. This allows the PSP to verify the identity of the RA before processing provisioning requests. Answer A correctly describes SAML being used within the SOAP header as the trust mechanism in this federated relationship.

Topics

#SAML#SPML#federated identity#trust relationship

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice