Exam NSE7_FSN_AR-7.6 Topic 1 Question 84 Discussion
Actual exam question for Fortinet's NSE7_FSN_AR-7.6 exam
Question #: 84
Topic #: 1
Question #: 84
Topic #: 1
Refer to the exhibit.
The output from using the command diagnose debug application samld -1 to diagnose a SAML connection is shown. Based on this output, which two conclusions can you draw? (Choose two answers)
The output from using the command diagnose debug application samld -1 to diagnose a SAML connection is shown. Based on this output, which two conclusions can you draw? (Choose two answers)
Suggested Answer: B,D Vote an answer
The correct answers are B and D.
The study guide explains that in the SP Login Dump section, FortiGate is acting as the service provider (SP), and that you should read these fields:
"The IdP SSO URL, from the setting idp-single-sign-on-url in the FortiGate configuration"
"The SP SSO URL, from the setting single-sign-on-url in the FortiGate configuration"
"The IdP Entity ID, from the setting id-entity-id in the FortiGate configuration"
"The SP Entity ID, from the setting entity-id setting in the FortiGate configuration" In the exhibit:
Destination= " https://10.1.10.2/saml-idp/nst/login/ " # this is the IdP SSO URL
< lasso:RemoteProviderID > http://10.1.10.2/samlidp/nst/metadata/ < /lasso:RemoteProviderID > # this is the IdP Entity ID AssertionConsumerServiceURL= " https://10.1.10.254:1003/remote/saml/login/ " # this is the SP SSO URL
< saml:Issuer > https://10.1.10.254:1003/remote/saml/metadata/ < /saml:Issuer > # this is the SP Entity ID The same study-guide example shows this exact mapping pattern, where:
Destination points to the IdP
AssertionConsumerServiceURL and Issuer point to the SP
Therefore:
10.1.10.2 is the IdP # D
10.1.10.254 is the SP # B
So the verified answers are: B, D.
The study guide explains that in the SP Login Dump section, FortiGate is acting as the service provider (SP), and that you should read these fields:
"The IdP SSO URL, from the setting idp-single-sign-on-url in the FortiGate configuration"
"The SP SSO URL, from the setting single-sign-on-url in the FortiGate configuration"
"The IdP Entity ID, from the setting id-entity-id in the FortiGate configuration"
"The SP Entity ID, from the setting entity-id setting in the FortiGate configuration" In the exhibit:
Destination= " https://10.1.10.2/saml-idp/nst/login/ " # this is the IdP SSO URL
< lasso:RemoteProviderID > http://10.1.10.2/samlidp/nst/metadata/ < /lasso:RemoteProviderID > # this is the IdP Entity ID AssertionConsumerServiceURL= " https://10.1.10.254:1003/remote/saml/login/ " # this is the SP SSO URL
< saml:Issuer > https://10.1.10.254:1003/remote/saml/metadata/ < /saml:Issuer > # this is the SP Entity ID The same study-guide example shows this exact mapping pattern, where:
Destination points to the IdP
AssertionConsumerServiceURL and Issuer point to the SP
Therefore:
10.1.10.2 is the IdP # D
10.1.10.254 is the SP # B
So the verified answers are: B, D.
by Ken at Oct 16, 2026, 06:14 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).