Which of the following is a required step when configuring SAML SSO in Atlassian Cloud?

Installing a plugin on the identity provider

Disabling all other authentication methods

Creating a new user in Atlassian Cloud for every employee

Providing the IdP's Single Sign-On URL and certificate

An organization is implementing SAML SSO for Atlassian Cloud. They want to enforce SSO for all users, but they are concerned about locking themselves out if the IdP is unavailable. What is the recommended approach?

Enable SSO but keep a break-glass admin account that bypasses SSO.

Enable SSO and rely on the IdP's high availability.

Disable SSO and use password authentication only.

What happens when a user authenticates via SAML but their email address does not match an existing Atlassian Cloud user?

The user is denied access and must be manually created by an admin.

The user is redirected to the IdP to correct their email address.

A new user is created automatically if user provisioning is enabled.

The user is logged in as a guest with limited access.

A company has SAML SSO configured with a metadata URL. They recently updated the metadata URL in Atlassian Cloud to a new URL, but users are still getting errors. The admin verified the new URL is correct and accessible. What is the most likely cause?

The IdP is not sending the SAML response to the correct ACS URL.

The SAML response is not signed.

The metadata URL is cached by Atlassian Cloud.

An organization is setting up SAML SSO with a new IdP. They have configured the SAML app in the IdP with the ACS URL and Entity ID from Atlassian Cloud. What else must they do in Atlassian Cloud to complete the setup?

Upload the IdP metadata or manually enter the IdP details.

Assign users to the SAML app in Atlassian Cloud.

Create a SAML app in Atlassian Cloud.

AtlassianCloud Organization Admin

Domain 2Objective 2

Configure SAML Single Sign-On ACP-520 Practice Questions (Page 4)

Part of the Atlassian Access and Authentication domain, which makes up ~44% of our current practice bank. Atlassian does not publish an official question count, but from its 90-minute exam (~35–60 total, ~15–26 in this domain), expect 5–9 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

Questions 16–20

16foundation · easy
Which of the following is a required step when configuring SAML SSO in Atlassian Cloud?
Select an answer first
17application · medium
An organization is implementing SAML SSO for Atlassian Cloud. They want to enforce SSO for all users, but they are concerned about locking themselves out if the IdP is unavailable. What is the recommended approach?
Select an answer first
18foundation · easy
What happens when a user authenticates via SAML but their email address does not match an existing Atlassian Cloud user?
Select an answer first
19expert · hard
A company has SAML SSO configured with a metadata URL. They recently updated the metadata URL in Atlassian Cloud to a new URL, but users are still getting errors. The admin verified the new URL is correct and accessible. What is the most likely cause?
Select an answer first
20application · medium
An organization is setting up SAML SSO with a new IdP. They have configured the SAML app in the IdP with the ACS URL and Entity ID from Atlassian Cloud. What else must they do in Atlassian Cloud to complete the setup?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACP-520

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Atlassian. “ACP-520” is a trademark of its owner, used for identification only.