PCCSE · Question #108
Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud? (Choose two.)
The correct answer is B. SSO Certificate D. SP (Service Provider) Entity ID. When configuring SAML-based SSO, the Identity Provider (IdP) must be told how to identify and communicate with Prisma Cloud as the Service Provider. The SP Entity ID is the unique identifier the IdP uses to recognize Prisma Cloud. The SSO Certificate (SP certificate) is…
Question
Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud? (Choose two.)
Options
- AUsername
- BSSO Certificate
- CAssertion Consumer Service (ACS) URL
- DSP (Service Provider) Entity ID
How the community answered
(25 responses)- A8% (2)
- B84% (21)
- C8% (2)
Explanation
When configuring SAML-based SSO, the Identity Provider (IdP) must be told how to identify and communicate with Prisma Cloud as the Service Provider. The SP Entity ID is the unique identifier the IdP uses to recognize Prisma Cloud. The SSO Certificate (SP certificate) is uploaded to the IdP so it can validate signed authentication requests originating from Prisma Cloud. The ACS URL is also used in SSO flows but is provided by Prisma Cloud to the IdP automatically or noted separately; it is not one of the two primary inputs required on the IdP configuration side per Prisma Cloud's SSO setup documentation. Username is an end-user attribute, not an SSO configuration input.
Topics
Community Discussion
No community discussion yet for this question.