StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 95 of 440 · easy

During SAML login, FortiSASE redirects the browser to Microsoft Entra ID, which authenticates the user and returns an assertion. Which role description is correct?

Choose the single best answer.

  1. A.The successful IdP assertion itself replaces all FortiSASE access-policy decisions
  2. B.FortiSASE is the SP and Entra ID is the IdP
  3. C.FortiSASE is the IdP and Entra ID is the service provider
  4. D.The browser is the IdP because it follows the redirects
Show the answer and explanation

✓ Correct answer

  • FortiSASE is the SP and Entra ID is the IdP

Entra ID authenticates as IdP; FortiSASE consumes the assertion as SP. The browser transports redirects rather than acting as IdP, and successful authentication still requires access authorization.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.