問題文
An employee clicks a bookmarked link to a protected Salesforce report page. She has not logged in yet. The org is configured as a SAML service provider. Which sequence describes what happens next?
選択肢
- The org sends a SAML request to the identity provider, the identity provider authenticates her and returns a signed SAML response, and the org then validates it and opens the report page.
- The org validates the bookmark against the identity provider's metadata and, if the URL matches, logs her in with no assertion at all, which makes the bookmarked address itself the proof of identity for the session.
- She is prompted for her Salesforce password instead.
- The identity provider immediately sends a signed SAML response to the org without any request, and the identity provider always starts the flow whenever a user reaches a protected resource at the service provider for the first time in a browser session.