A Security Engineer Is Deploying an IdP to Broker Authentication

Multiple Choice

A security engineer is deploying an IdP to broker authentication between applications. These applications all utilize SAML 2.0 for authentication. Users log into the IdP with their credentials and are given a list of applications they may access. One of the application's authentications is not functional when a user initiates an authentication attempt from the IdP. The engineer modifies the configuration so users browse to the application first, which corrects the issue. Which of the following BEST describes the root cause?

A) The application only supports SP-initiated authentication.
B) The IdP only supports SAML 1.0
C) There is an SSL certificate mismatch between the IdP and the SaaS application.
D) The user is not provisioned correctly on the IdP.