The correct answer is B . In Zscaler’s Zero Trust architecture, the Verify Identity and Context stage relies on identity systems that can authenticate users and provide policy-relevant attributes. The ZIA authentication architecture explicitly states that Zscaler partners with leading Identity Providers (IdPs) such as Azure Active Directory, Okta, and PingFederate , and that responses from the IdP can include the user’s identity, department, and group membership. Those attributes are then used to decide which policies apply.

The ZPA architecture reinforces the same model by stating that SAML and SCIM attributes such as group membership and role are used in access policy rules, and that additional access context can be provided by the SAML Identity Provider . This makes IdP integration a direct part of verification and context evaluation in the Zero Trust process.

The other options are not the best fit for this stage. SIEM tools support logging and analytics, while cloud and data center providers host workloads rather than acting as identity-verification systems. Therefore, the correct answer is IdPs like Okta and PingFederate .