Exam SY0-501 topic 1 question 957 discussion

I too would go for D. @certpro this article might make things clear https://help.salesforce.com/articleView?id=sso_saml_setting_up.htm&type=5 "When you configure Salesforce as the service provider using SAML, authenticated users can flow from an external identity provider into Salesforce" Here, Salesforce is the third-party cloud app.

The "service provider" is the entity that owns/has the service you need access to, like a proprietary application or a web server. The "identity provider" is the 3rd party that has the "authorization server" which contains the credentials. You ask for resource from "serv prov" they send you a request form(actually a signed redirect), which you then send on to the "id prov"...id provider has you enter credentials and if authorized, you get a token(digitally signed by id provider) that you then hand off to service provider and you are allowed acess!!! Argue with it if you want, IDC... A is correct. Sorry bout your luck!!

I believe professor Messer! It's A.

well, look at it this way for example you are that engineer who is implementing a third party cloud application (for ex something like dashboarding tool created by abc company), you implement it to your organization, you want your employee to access it using federation and not create separate username and password. Now who is providing the service? that abc is the service provider you implement it but where is the service provided from? from the abc company . Now look at the option A "the cloud company is the identity provider" NO, THAT NOT RIGHT, we are using the federation to get into the cloud application, we do not have any username or password to get into the cloud application. So the cloud company can be the service provider and it can also be the authorization provider becoz we want to get into the cloud application and that application will be the one to authorize us to get inside, so I think the answer is D , since we might use the company username and password (identity provider ) to get into the cloud application.