Test your SAML knowledge with a free interactive quiz — 20 questions with answers and explanations. No signup needed to play.
Question 1/5Score 0
What is a SAML "assertion"?
Questions in this quiz
What is a SAML "assertion"?
What is the difference between an "SP-initiated" and an "IdP-initiated" SAML flow?
Why is it considered a bad practice for a service provider to trust a SAML assertion without validating its digital signature against the configured IdP's certificate?
What are the two main roles in a SAML SSO flow?
What is a common transport binding used to deliver a SAML assertion from the IdP to the SP via the user's browser?
What is the purpose of the Assertion Consumer Service (ACS) URL in a SAML SP configuration?
What is SAML?
What is a SAML "metadata" document used for?
What is the main structural/format difference between SAML and OpenID Connect (OIDC)?
In a typical enterprise setup, why might an organization deploy SAML SSO in front of an existing LDAP/Active Directory user store rather than having every application query LDAP directly?
What is a common reason SAML remains heavily used in enterprise B2B and internal corporate SSO contexts, even as OIDC has grown popular for consumer-facing apps?
What is a "Just-In-Time (JIT) provisioning" pattern in the context of SAML SSO?