MENU
An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.
What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?
Suggested Answer: D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
SU
Sunshine
11 months ago
Is it really necessary to encrypt the SAML request? Seems like overkill.
MA
Maryanne
11 months ago
I agree, HTTPS is a must, but it’s not enough on its own.
DE
Deeanna
12 months ago
Wait, a self-signed certificate? That sounds risky!
MA
Maurine
12 months ago
I think option C is more important, gotta get those URLs right.
RI
Rikki
1 year ago
Definitely go with option D, encryption is key!
ED
Eden
1 year ago
Encrypting the SAML request with a CA-signed certificate sounds like a solid recommendation. I think we practiced a similar question about encryption in our last session.
CH
Cherrie
1 year ago
I feel like ensuring the Issuer and ACS URL is properly configured is important, but I can't recall if it's enough on its own to establish trust.
GL
Glen
1 year ago
I'm not entirely sure, but I think using a self-signed certificate might not be the best option for trust. We talked about this in class, right?
LA
Lanie
1 year ago
I remember we discussed the importance of using HTTPS to secure the connection between the IdP and SP. It seems like a basic but crucial step.
LO
Lorean
1 year ago
I'm pretty confident I can handle this question. Ensuring HTTPS between the SP and IdP is a simple but effective way to prevent SAML request tampering.
AZ
Azzie
1 year ago
Configuring the Issuer and ACS URL properly is crucial for SAML integration, so I'd start there to make sure the connection is set up correctly.
GL
Glen
1 year ago
Encrypting the SAML request using a CA-signed certificate sounds like a good way to add extra trust and security between the SP and IdP.
SO
Sommer
1 year ago
Hmm, I'm a bit confused about the different options here. I'll need to review my SAML security knowledge to figure out the best approach.
JE
Jenifer
1 year ago
This seems like a straightforward SAML security question. I'd focus on ensuring the integrity of the SAML request between the SP and IdP.
JA
Jamal
1 year ago
I'm a bit unsure about this one. The options all sound similar, but I need to make sure I understand the difference between them. Maybe I'll try to eliminate the ones that don't seem quite right.
KA
Kallie
1 year ago
Okay, let me see. Project Integration Management is about bringing all the pieces together, so I'm guessing the right answer is the project charter and project management plan. That makes the most sense to me.
LI
Ligia
1 year ago
Definitely prospective review - that's when you get approval before the actual medical service happens. Always do this with insurance to make sure it's covered.
CE
Celia
1 year ago
I have a gut feeling it's "with_parent: '{{intlist}}'", but I can't remember any specific examples using that in practice.
AN
Angelyn
2 years ago
True, but end-to-end encryption with CA signed certs might ensure trust the most.
RO
Rosina
2 years ago
Encryption seems robust but self-signed certificates are pretty common.
AR
Arlyne
2 years ago
Option B? A self-signed certificate? What is this, amateur hour? Definitely go with the CA-signed certificate, option D all the way!
AD
Adell
2 years ago
User1
CH
Christiane
2 years ago
User2
TE
Terina
2 years ago
Definitely go with the CA-signed certificate, option D all the way!
BL
Blondell
2 years ago
Option B? A self-signed certificate? What is this, amateur hour?
ER
Ernest
2 years ago
Yeah, option D is the way to go for extra security and trust between the SP and IdP.
CE
Cecily
2 years ago
Cecily is right, go with option D, the CA-signed certificate for sure.
TH
Thaddeus
2 years ago
Option B? A self-signed certificate? What is this, amateur hour?
WE
Weldon
2 years ago
I am considering the option about encrypting the SAML Request. D, right?
CH
Charlena
2 years ago
This is a tricky one, but I'd go with option D. Gotta keep that SAML request secure, even if it means a little more work.
AD
Adell
2 years ago
I agree with Aliza. Encryption is the best way to protect the SAML request from being tampered with. Option D is the clear choice here.
GL
Gladys
2 years ago
User B
TI
Timothy
2 years ago
User A
GA
Garry
2 years ago
I think the right answer might be using an HTTPS connection?
AN
Annamae
2 years ago
Option C seems like the most straightforward solution. Ensuring the Issuer and ACS URL are properly configured is crucial for a successful SSO integration.
DA
Daryl
2 years ago
Definitely, it's a fundamental step in ensuring the integrity of the SSO process.
JU
Justine
2 years ago
So, making sure the configuration is correct is key.
GA
Gary
2 years ago
Exactly, it's important for the SAML request content to remain secure.
MA
Marget
2 years ago
I agree, it helps establish trust between the SP and IdP.
MA
Marleen
2 years ago
Yes, ensuring the Issuer and ACS URL are properly configured is crucial for a successful SSO integration.
DO
Dorian
2 years ago
Option C seems like the most straightforward solution.
MA
Marci
3 years ago
Pretty nervous actually, securing SAML is critical.
AL
Aliza
3 years ago
Hmm, I think option D is the way to go. Encrypting the SAML request with a CA-signed certificate provides an extra layer of trust and security.
LU
Luther
3 years ago
This question about securing SAML requests, how do you feel about it?