CAS-001 · Question #81
To prevent a third party from identifying a specific user as having previously accessed a service provider through an SSO operation, SAML uses which of the following?
The correct answer is A. Transient identifiers. SAML transient identifiers (also called transient name IDs) are temporary, one-time-use pseudonyms assigned to a user for a single session. Because they are not persistent across sessions, a third party-including the service provider itself-cannot correlate multiple visits to…
Question
To prevent a third party from identifying a specific user as having previously accessed a service provider through an SSO operation, SAML uses which of the following?
Options
- ATransient identifiers
- BSOAP calls
- CDiscovery profiles
- DSecurity bindings
How the community answered
(53 responses)- A91% (48)
- B2% (1)
- C6% (3)
- D2% (1)
Explanation
SAML transient identifiers (also called transient name IDs) are temporary, one-time-use pseudonyms assigned to a user for a single session. Because they are not persistent across sessions, a third party-including the service provider itself-cannot correlate multiple visits to identify or track the same user over time. This protects user privacy in SSO flows. SOAP calls are a transport binding mechanism, discovery profiles help locate an appropriate Identity Provider, and security bindings define how SAML messages are secured in transit-none of these address user anonymity.
Topics
Community Discussion
No community discussion yet for this question.