Your organization is using Active Directory and wants to configure Security Assertion Markup Language (SAML). You must set up and enforce single sign-on (SSO) for all users. What should you do?

Question

Options

• A
  1. Create a new SAML profile.
• B
  1. Configure prerequisites for OpenID Connect (OIDC) in your Active Directory (AD) tenant.
• C
  1. Create a new SAML profile.
• D
  1. Manage SAML profile assignments.

• A
  91% (42)
• B
  2% (1)
• C
  2% (1)
• D
  4% (2)

Explanation

To enforce SAML-based SSO with Active Directory for Google Workspace or Cloud Identity, the correct sequence is: (1) Create a new SAML profile in the Google Admin console, which involves configuring the Identity Provider (IdP) details from Active Directory (entity ID, SSO URL, certificate) and the Service Provider (SP) details to configure in AD FS or a compatible SAML IdP; (2) Assign the SAML profile to organizational units or groups to enforce SSO for all users. Option B describes OIDC (OpenID Connect), not SAML - a different federation protocol. Options C and D describe partial steps (creating a profile or managing assignments) but do not represent the complete, ordered process needed to configure and enforce SAML SSO end-to-end.

No community discussion yet for this question.