Ping Federate Flashcard

Front

Which of these is NOT a type of SAML assertion? Authorization Decision Assertion, Authentication Assertion, OAuth Token Assertion, Attribute Assertion

Back

OAuth Token Assertion

Front

In SAML SSO, what is the role of the Service Provider (SP)?

Back

Consumes SAML assertions and provides access to resources

Front

What is the purpose of the SAML Authentication Request?

Back

It is sent by the SP to the IdP to request user authentication.

Front

Which binding is commonly used to send a SAML Authentication Request from an SP to an IdP? Options: OAuth Binding, HTTP Redirect Binding, SCIM Binding, LDAP Binding

Back

HTTP Redirect Binding

Front

What is the difference between IdP-initiated SSO and SP-initiated SSO?

Back

IdP-initiated SSO starts at the Identity Provider, while SP-initiated SSO starts at the Service Provider.

Front

Which of the following is NOT a component of a SAML message? Assertion, Signature, OAuth Token, Subject

Back

OAuth Token

Front

Which protocol is used to exchange SAML messages? Options: LDAP, OAuth 2.0, HTTP/HTTPS, OpenID Connect

Back

HTTP/HTTPS

Front

What is the purpose of an Assertion Consumer Service (ACS) URL in SAML?

Back

To receive and process SAML assertions from the IdP at the SP

Front

Which of the following security mechanisms is used in SAML to ensure message integrity? JSON Web Token (JWT), XML Digital Signatures, OAuth Bearer Tokens, TLS Certificates

Back

XML Digital Signatures

Front

What algorithm is commonly used to sign SAML assertions?

Back

RSA-SHA256