Free Okta Okta-Certified-Consultant Exam Dumps Questions & Answers

In a SAML 2.0 scenario, the Service Provider never directly interacts with the Identity Provider. Instead, a browser acts as the agent to carry out all the redirections.

• A.True for OIDC, not for SAML 2.0
• B.False, as APIs go directly into each other,s domains, thus endpoints
• C.False, as SAML 2.0 implies the trust to be exchanged directly between IDP (Identity provider) and SP (Service Provider)
• D.True, hence why different TLS versions can still be understood between parts and browser will forward the information then to the other side with the right TLS version needed

How can you let users from external Identity Providers SSO (Single Sign On) into Okta?

• A.By only enabling JIT (Just-in-Time) Provisioning at an org-level
• B.Okta is an IdP, hence it cannot be an SP to allow such a flow
• C.By creating an Inbound SAML connection with that IdP

Which Okta feature / solutions offers the admin the possibility to redirect desktop users to Integrated Windows Authentication (IWA) and mobile users to Okta for authentication?

• A.On-Prem MFA Agent
• B.Agentless DSSO
• C.Device Trust
• D.Routing Rules
• E.Org to Org
• F.Desktop Single-Sign On

Beside Okta org. being used as an authorization server, there also can be other types of authorization servers added (other custom ones).

• A.True and the issuer looks like: https://okta.com
• B.True and the issuer looks like: https://<subdomain>.okta.com
• C.FALSE
• D.True and the issuer looks like: https://<subdomain>.okta.com/oauth2/${authorizationServerId}
• E.TRUE

Okta org, when being used as an authorization server (issuer: https://<subdomain>.okta.com), can only be used for OIDC (Open ID Connect, hence Authentication) and not for OAuth (Authorization).

• A.Statement is True in its entirety
• B.False, but for the correlation between OIDC and Authentication, which is indeed True
• C.True, but for the issuer part, where the URL is wrong
• D.Statement is False in its entirety