MENU
Which is a / are best-practice(s) in a SAML 2.0 situation?
Solution: To not use SAML 2.0 and Provisioning via the same App instance in Okta, but integrate the same SP custom domain via two different app instances in Okta, one for SSO, via SAML 2.0 in this case, and one for provisioning on users
Suggested Answer: B
Get Premium Okta Certified Administrator Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
SH
Shawnee
12 months ago
Good point, but I wonder if it complicates the setup too much.
DO
Dorthy
12 months ago
Seems a bit overkill to me, why not just use one instance?
MA
Mari
12 months ago
Wow, I didn't realize that was a best practice!
TE
Telma
1 year ago
I disagree, using the same instance could simplify things.
DI
Diane
1 year ago
That makes total sense, separating SSO and provisioning is key!
FE
Felton
1 year ago
I feel like we went over this in our last session. Using different app instances makes sense, but I wonder if there are other considerations we should keep in mind.
DU
Dulce
1 year ago
I'm a bit confused about the specifics of SAML 2.0. I know we shouldn't mix SSO and provisioning, but I can't recall why it's so critical.
TE
Telma
1 year ago
I think we practiced a similar question about SAML configurations, and I recall that keeping SSO and provisioning separate was emphasized as a good strategy.
PA
Patria
1 year ago
I remember we discussed how using separate app instances for SSO and provisioning can help avoid conflicts, but I'm not entirely sure if that's the only best practice.
LE
Leah
1 year ago
Okay, I think I've got this. The key is the phrase "automatically consent," which suggests a contract of adhesion where the terms are non-negotiable. I'm going to go with B.
DI
Dierdre
1 year ago
Okay, I think the key here is looking for a network type that has redundant paths but doesn't have a protocol in place to prevent broadcast storms, like STP. That points me towards option D as the right answer.