DRAG DROP Drag and drop the events for an on-premises Jabber SAML SSO flow from the left into the correct order on the right. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/300-810/page_23_img_1.jpg

Option D is correct, the typical SAML SSO flow for Jabber starts with a client request then hits IdP, then SAML response is posted to SP. C mixes up the IdP and SP steps, easy trap if you rush it.

D tbh, found similar order in the official guide and a couple of practice labs. If you're still stuck, Cisco docs on SAML/Jabber flows are a solid reference.

Its D (torn between C and D), question’s nicely structured for SSO flow ordering.

Depends if the image wants pure SAML exchange or includes Jabber service discovery. Pretty sure it's not always D.

Q: 18

DRAG DROP Drag and drop the events for an on-premises Jabber SAML SSO flow from the left into the correct order on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

Service Provider Authorization request
SSO Mode Discovery
IDP Authentication
Service Provider Authentication

Correct Answer:

Steps Step 1: B. SSO Mode Discovery Step 2: A. Service Provider Authorization request Step 3: C. IDP Authentication Step 4: D. Service Provider Authentication

Explanation

The correct sequence follows the standard SP-Initiated SAML SSO flow for Cisco Jabber:

SSO Mode Discovery: The Jabber client first contacts the Service Provider (CUCM/IM&P) to determine the authentication method (checking if SSO is enabled via the ssoMode API).
Service Provider Authorization request: Once SSO is identified, the Service Provider generates a SAML Authentication Request (AuthnRequest) and redirects the client to the Identity Provider (IdP).
IDP Authentication: The User Agent (client) contacts the IdP, and the IdP authenticates the user (e.g., via username/password).
Service Provider Authentication: The IdP generates a SAML assertion. The client passes this assertion back to the Service Provider, which validates the signature and asserts the user's identity, completing the authentication process.

References

Cisco Unified Communications Manager Features and Services Guide, Release 12.5(1), Chapter: "SAML Single Sign-On", Section: "SAML SSO Call Flow".

Quote: "The client ... checks the SSO mode... If SSO is enabled, the client sends a request... The Unified CM server redirects the browser to the IdP... The IdP authenticates the user... The IdP redirects the browser back to the Unified CM server with a SAML assertion."

Cisco Live 2017 - BRKCOL-2022, "Deploying and Troubleshooting Jabber", Slide: "SAML SSO Flow".

Context: Diagrams in official technical sessions explicitly show the order: Discovery -> Redirect (Auth Request) -> IdP Auth -> SP Validation.

SAML V2.0 Technical Overview, OASIS Standard, Section 5.1.2 "SP-Initiated SSO: Redirect/POST Bindings".

Context: Defines the industry-standard flow: Discovery/Request -> AuthnRequest (SP to IdP) -> Response (IdP to SP).

Cisco 300-810 Real Exam Questions [October 2026 Update] Quiz

Premium Access Includes