In the SAML negotiation process, which section does the Identity Provider (IdP) provide the SAML attributes utilized in the authentication process to the Service Provider (SP)?
The study guide states that: “SAML attributes are pieces of information about a user that are exchanged between IdPs and SPs during the SAML authentication process. These attributes are included in the SAML assertion, which is built by the IdP as part of the authentication process.”
It also shows the real-time SAML debug output under “** Assertion Dump ****”**, where the SAML attributes appear inside the assertion, such as:
< saml:Attribute Name= " username " >
< saml:Attribute Name= " groups " >
The same study-guide page explicitly labels this area as “Attributes sent by IdP”
So, although the IdP sends an authentication response overall, the actual section that contains the SAML attributes is the Assertion dump
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit