To enable authentication integration for automated user provisioning in Cortex XSIAM, what steps are essential?

The correct answer is A. Enable LDAP sync B. Configure SAML SSO. Automated user provisioning in Cortex XSIAM requires both LDAP sync (A) and SAML SSO (B) working together: LDAP sync pulls user and group data from your directory (like Active Directory) into XSIAM, while SAML SSO establishes the federated identity trust that allows those users…

Identity and Access Management

Question

Options

AEnable LDAP sync
BConfigure SAML SSO
CSet up a proxy for endpoint filtering
DConnect to Azure Monitor

How the community answered

(30 responses)

A
80% (24)
C
13% (4)
D
7% (2)

Explanation

Automated user provisioning in Cortex XSIAM requires both LDAP sync (A) and SAML SSO (B) working together: LDAP sync pulls user and group data from your directory (like Active Directory) into XSIAM, while SAML SSO establishes the federated identity trust that allows those users to authenticate seamlessly without managing local credentials.

Why the distractors are wrong:

C (Proxy for endpoint filtering) - this is a network traffic control concept, not related to identity/user provisioning.
D (Azure Monitor) - this is a Microsoft observability/logging service; connecting to it enables log ingestion, not user authentication or provisioning.

Memory tip: Think "provision = find users + let them in." LDAP finds the users (directory sync), and SAML lets them in (federated login). Both halves are required - sync without auth, or auth without sync, leaves the integration incomplete.

Topics

#LDAP sync#SAML SSO#user provisioning#authentication integration

Community Discussion

No community discussion yet for this question.

Full XSIAM-ENGINEER Practice