CAS-002 · Question #97
SAML entities can operate in a variety of different roles. Valid SAML roles include which of the following?
The correct answer is C. Identity provider and service provider. The core SAML roles are Identity Provider (IdP) and Service Provider (SP), which together enable federated single sign-on across security domains.
Question
SAML entities can operate in a variety of different roles. Valid SAML roles include which of the following?
Options
- AAttribute authority and certificate authority
- BCertificate authority and attribute requestor
- CIdentity provider and service provider
- DService provider and administrator
How the community answered
(34 responses)- B9% (3)
- C88% (30)
- D3% (1)
Why each option
The core SAML roles are Identity Provider (IdP) and Service Provider (SP), which together enable federated single sign-on across security domains.
Certificate Authority (CA) is a PKI role, not a SAML role. While SAML uses X.509 certificates, a CA is not a defined SAML entity role in the specification.
'Attribute requestor' and 'certificate authority' are not defined SAML entity roles - the SAML specification defines attribute authority separately, and CA is a PKI construct outside SAML's role model.
In the SAML 2.0 specification, the Identity Provider authenticates the user and issues SAML assertions, while the Service Provider relies on those assertions to grant access to its resources. These two roles are the fundamental building blocks of all SAML-based federated identity and SSO deployments.
'Administrator' is not a defined SAML entity role - the SAML 2.0 specification defines roles such as identity provider, service provider, and attribute authority, not administrative roles.
Concept tested: SAML 2.0 entity roles - identity provider and service provider
Source: https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
Topics
Community Discussion
No community discussion yet for this question.