Q: 6
A customer has the requirement to use SAML authentication on AEM using their SAML 2.0
compatible IDP.
Example:
AEM: www.wknd.com/content/siteB/index.html
IDP: https://www.idpB.com
How should an AEM Developer configure their SAML Authentication Handler?
Options
Discussion
Option B You really need
path and idpUrl to set up SAML auth in AEM, that's what fits standard configs. A is a trap with the assertionConsumerServiceURL, which isn't for IDP targeting. Open to other views but pretty sure it's B.Its B - config needs path and idpUrl only for basic AEM SAML setup, not assertionConsumerServiceURL or entityId.
I think B. You need to set the handler's path for the protected AEM resource and idpUrl to redirect authentication properly, that's standard for SAML in AEM. Option A is a trap because assertionConsumerServiceURL isn't used that way here. Pretty sure B from similar practice, but happy to hear otherwise if someone knows a catch.
Yeah, B looks right. SAML handler in AEM needs path for the protected resource and idpUrl for redirecting to the correct identity provider. Saw a similar question in practice tests. I think it's B, agree?
Its B, the path and idpUrl properties are what you'd set for SAML auth in AEM if the focus is just authentication. If they wanted custom entity IDs or user provisioning, it'd mention that. Pretty sure this matches exam reports but open to other opinions.
B, lots of practice tests and the Adobe docs highlight those two parameters for this handler.
Nah, I don't think A is right since userIntermediatePath isn't for handler mapping. It's B, those are the two core params SAML handler uses in AEM. Option A tries to trick you with similar-sounding config.
Probably B, since assertionConsumerServiceURL is only valid on the IDP side, not for config on AEM side.
Which official AEM docs or practice test covers SAML handler property mapping best for this scenario? I remember something in the admin guide but not sure which page is most up to date on config properties.
I don't think it's A. B matches standard SAML setup for AEM, since assertionConsumerServiceURL is just a distractor here.
Be respectful. No spam.
