CAS-001 · Question #37
When authenticating over HTTP using SAML, which of the following is issued to the authenticating user?
The correct answer is D. An assertion ticket. SAML (Security Assertion Markup Language) issues an assertion ticket (D) to the authenticating user. A SAML assertion is an XML document produced by the Identity Provider (IdP) that contains authentication statements, attribute statements, and optionally authorization…
Question
When authenticating over HTTP using SAML, which of the following is issued to the authenticating user?
Options
- AA symmetric key
- BA PKI ticket
- CAn X.509 certificate
- DAn assertion ticket
How the community answered
(20 responses)- A5% (1)
- B5% (1)
- D90% (18)
Explanation
SAML (Security Assertion Markup Language) issues an assertion ticket (D) to the authenticating user. A SAML assertion is an XML document produced by the Identity Provider (IdP) that contains authentication statements, attribute statements, and optionally authorization statements about the user. The user (or the browser on their behalf) presents this assertion ticket to the Service Provider to gain access. PKI tickets (B) are associated with Kerberos-based systems, not SAML. X.509 certificates (C) are used in PKI for establishing identity via public key infrastructure. Symmetric keys (A) are used for encryption but are not what SAML issues. SAML's core mechanism is the assertion - a digitally signed statement that the IdP vouches for the user's identity.
Topics
Community Discussion
No community discussion yet for this question.