The correct answer is B. Assertion dump.
The study guide states: “SAML attributes are pieces of information about a user that are exchanged between IdPs and SPs during the SAML authentication process. These attributes are included in the SAML assertion, which is built by the IdP as part of the authentication process.”
The same study guide page for real-time SAML troubleshooting shows the section labeled **** Assertion Dump ****, and inside that assertion it displays the actual user attributes, such as:
< saml:Attribute Name= " username " >
< saml:Attribute Name= " groups " >
It also explicitly marks this part as “Attributes sent by IdP”
Why the other options are wrong:
A. Bindings HTTP post is incorrect because bindings define how SAML messages are transported, not the section that contains the attributes. The study guide says: “Bindings: Define how SAML protocol messages are transmitted over different communication channels.”
C. Authentication request is incorrect because that is built by the SP and sent toward the IdP, not where the IdP’s user attributes are shown. The study guide’s flow says the SP “Builds auth request” and the IdP later “Builds auth response.”
D. Authentication response is broader than the exact section being asked. The exact section in the study guide where the IdP-provided attributes are shown is the Assertion dump.
So the verified answer is: B.
