Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CSE > SSO/SAML > Flashcards

SSO/SAML Flashcards

(61 cards)

Start Studying
1
Q

What does SAML stand for?

A

Security Assertion Markup Language

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the primary purpose of SAML?

A

To authenticate users to web applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How does SAML facilitate communication between federated applications?

A

By allowing them to trust one another’s users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a common use case for SAML?

A

Authenticating users to third-party web apps via redirects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does SSO stand for?

A

Single Sign-On

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How does SAML relate to SSO?

A

SAML is the protocol that enables web-based SSO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an Identity Provider (IdP)?

A

The service that performs authentication for users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Service Provider (SP)?

A

The web application the user is trying to access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a SAML Assertion?

A

A message asserting a user’s identity and attributes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the role of browser redirects in SAML authentication?

A

They facilitate the authentication process between IdP and SP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: SAML requires SSL or TLS to function.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the IdP do during the authentication process?

A

Verifies the user’s identity and issues a SAML token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the SP do with the SAML assertion?

A

Validates it to grant access to the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the difference between IdP-initiated and SP-initiated logins?

A

IdP-initiated starts at the IdP, SP-initiated starts at the SP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Fill in the blank: The process of sending a user to the IdP for authentication is known as _______.

A

IdP-initiated login

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Fill in the blank: The process of sending a user to the SP first and then to the IdP is known as _______.

A

SP-initiated login

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What information must be configured at the IdP for each SP?

A
  • EntityID
  • Assertion Consumer Service (ACS)
  • ACS Validator
  • Attributes
  • RelayState
  • SAML Signature Algorithm
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is an X.509 Certificate in the context of SAML?

A

A certificate used to verify the public key from the IdP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the purpose of the ACS URL?

A

To specify where the SAML assertion is sent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What attribute is typically included in a SAML assertion?

A

NameID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is RelayState used for?

A

Deep linking for SAML

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the SP need to validate regarding the SAML assertion?

A

That it is issued by the trusted IdP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does the SP configuration require from the IdP?

A

Issuer URL and X.509 certificate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

True or False: The SP is concerned with how the IdP verifies a user’s identity.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is a SAML request?
A request from the SP to the IdP to obtain a SAML assertion
26
What does the term 'EntityID' refer to in SAML?
A globally unique name for the SP
27
What is the significance of the ACS Validator?
Ensures the SAML assertion is sent to the correct ACS
28
What is the purpose of SAML assertions?
To authenticate the user's identity to the service provider
29
What does the Issuer URL represent in SAML?
Unique identifier of the IdP, formatted as a URL
30
Fill in the blank: A real example of an Issuer URL is _______.
https://access.wristbandtent.com/saml2/idp/metadata.php
31
What is the SAML SSO Endpoint?
An IdP endpoint that initiates authentication when redirected by the SP
32
What does the SAML SLO Endpoint do?
Closes the user’s IdP session when redirected by the SP
33
Fill in the blank: A real example of a SAML SLO Endpoint is _______.
https://access.wristbandtent.com/logout
34
How does SAML differ from WS-Fed?
SAML is widely used for cloud services, while WS-Fed is simpler but less prevalent
35
What is the primary use of OAuth?
To allow users to access services without creating new credentials
36
True or False: SAML is commonly used in consumer apps.
False
37
What is Microsoft's approach to SAML?
Microsoft AD FS uses its own terminology and approach for SAML
38
Define 'Relying Party' in Microsoft AD FS terminology.
Service Provider
39
What are Claims Rules in Microsoft AD FS?
Rules to alter how or when to invoke authentication
40
What is ImmutableID in Active Directory?
The equivalent of an ObjectGUID
41
How should you start troubleshooting SAML issues?
By checking the basics
42
What should you determine regarding the scope of a SAML issue?
Is it affecting all users or just a few?
43
What to check first if only a few users are experiencing an error?
Error messages, username validity, account status, and authentication steps
44
What tool can be used to view the contents of a SAML assertion?
SAML Tracer
45
What is one troubleshooting step for errors at the IdP?
Clear cache and try again
46
What should you verify if all users are having trouble with the SP?
What the SP expects the SAML assertion to look like
47
Fill in the blank: SAML is ubiquitous in the workplace for _______.
cloud-based apps
48
What is a key difference between SAML and OAuth?
SAML is for authentication while OAuth is for authorization
49
What should be prioritized when troubleshooting SAML authentication flows?
Ensure primary authentication is working before moving on
50
What is the main function of an IdP in SAML?
To validate user identities and issue SAML assertions
51
How does SAML handle user authentication?
Through browser redirects
52
What is Single Sign-On (SSO)?
SSO is an authentication method that allows users to access multiple applications with one set of login credentials, enhancing convenience and security.
53
What does SAML stand for and what is its purpose?
SAML stands for Security Assertion Markup Language. It’s an open standard that enables the exchange of authentication and authorization data between an identity provider (IdP) and a service provider (SP).
54
How are SSO and SAML related?
SAML is a protocol that facilitates SSO by allowing identity providers to authenticate users and share that authentication with multiple service providers, enabling seamless access across applications.
55
What are the main components involved in SAML authentication?
The primary components are the Identity Provider (IdP), which authenticates the user, and the Service Provider (SP), which provides the service the user wants to access.
56
Can you outline the basic steps of the SAML authentication process?
1. The user attempts to access a service (SP). 2. The SP redirects the user to the IdP for authentication. 3. The IdP authenticates the user and generates a SAML assertion. 4. The user is redirected back to the SP with the assertion. 5. The SP validates the assertion and grants access to the user.
57
What are the advantages of implementing SSO?
SSO enhances user convenience by reducing password fatigue, improves security by minimizing password reuse, and streamlines access management across multiple applications.
58
How does SAML benefit organizations?
SAML provides a standardized method for sharing authentication data, reduces the need for multiple passwords, and enables secure, seamless access to multiple applications across different domains.
59
What is a SAML assertion?
A SAML assertion is an XML document issued by the IdP that contains authentication information about the user, which the SP uses to grant or deny access.
60
How does SAML differ from OAuth?
SAML is primarily used for authentication and exchanging user identity information between IdPs and SPs, while OAuth is used for authorization, allowing third-party applications to access user resources without exposing credentials.
61
What is required to implement SSO using SAML?
Implementation requires configuring trust relationships between the IdP and SPs, setting up SAML assertions, and ensuring secure communication channels for the exchange of authentication data.

CSE (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions