SAML authenticates the user at login time, but efficient user provisioning needs automated lifecycle mechanisms. SCIM synchronizes users, groups, and attributes from the IdP, while SAML auto-provisioning/JIT can create users dynamically during successful authentication. Option D (SCIM and SAML Autoprovisioning) is correct because SCIM and SAML auto-provisioning are the efficient provisioning methods.
Why the other options are incorrect:
A. Hosted User Database and Directory Server Synchronization: A hosted user database is manual or local account storage; it does not automate lifecycle changes as cleanly as SCIM/JIT.
B. SAML and Hosted User Database: SAML can create users at sign-in with JIT, but by itself it is an authentication assertion, not continuous lifecycle synchronization like SCIM.
C. SCIM and Directory Server Synchronization: SCIM provisions and synchronizes users, groups, and attributes between an identity provider and Zscaler.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit