Which of the following does SAML uses to prevent government auditors or law enforcement from identifying specific entities as having already connected to a service provider through an SSO operation?

Transient identifiers in SAML 2.0 are one-time-use, randomly generated name identifiers that the identity provider creates fresh for each SSO transaction. Because they are not persistent and bear no relationship to the user's actual identity or to identifiers used in previous sessions, external parties such as government auditors or law enforcement cannot link multiple SP connections back to a specific user, achieving the privacy protection described.

Directory services such as LDAP or Active Directory store and retrieve persistent identity attributes - they do not generate anonymous or transient identifiers and would make identification of users easier, not harder.

RESTful interfaces are an HTTP-based architectural style for APIs and have no role within the SAML protocol stack for anonymizing or obscuring user identities across SSO operations.

Security bindings in SAML define how SAML messages are transported over specific protocols (HTTP redirect, POST, SOAP) and have nothing to do with protecting the anonymity of the identifier used in the assertion.