CIAM CIAM Federation and Single Sign-On 2

Question 1

In SAML, what is an 'assertion'?

Accepted Answer

An XML statement conveying information about a subject's identity and attributes

Answer

A SAML assertion is an XML-based statement issued by an Identity Provider that conveys identity, attribute, and authorization decision information about a subject.

Question 2

What standard is OpenID Connect built on top of?

Accepted Answer

OAuth 2.0

Answer

OpenID Connect is an identity layer built directly on top of OAuth 2.0, adding authentication and identity claims to OAuth's authorization framework.

Question 3

Which token format is most commonly used in modern OAuth 2.0 and OpenID Connect implementations?

Accepted Answer

JSON Web Token (JWT)

Answer

JSON Web Tokens (JWTs) are widely used as access tokens and ID tokens in OAuth 2.0 and OpenID Connect due to their compact, self-contained structure.

Question 4

What is 'SP-initiated SSO'?

Accepted Answer

SSO where the user first accesses the Service Provider, which redirects to the IdP

Answer

In SP-initiated SSO, the user first attempts to access a resource at the Service Provider, which then redirects them to the Identity Provider for authentication.

Question 5

What is the purpose of the audience restriction in a SAML assertion?

Accepted Answer

To specify which Service Provider is authorized to consume the assertion

Answer

The audience restriction in a SAML assertion specifies which Service Provider(s) may use it, preventing a valid assertion from being replayed at an unintended service.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM CIAM Federation and Single Sign-On 2