Which items should the solutions architect check to ensure identity federation is properly configured?
(Choose three.)
The IAM user’s permissions policy has allowed the use of SAML federation for that user.
The IAM roles created for the federated users’ or federated groups’ trust policy have set the SAML provider as the principal.
Test users are not in the AWSFederatedUsers group in the company’s IdP.
The web portal calls the AWS STS AssumeRoleWithSAML API with the ARN of the SAML provider, the ARN of the IAM role, and the SAML assertion from IdP.
The on-premises IdP’s DNS hostname is reachable from the AWS environment VPCs.
The company’s IdP defines SAML assertions that properly map users or groups. In the company to IAM roles with appropriate permissions.
I value that the answer is:
The IAM roles created for the federated users’ or federated groups’ trust policy have set the SAML provider as the principal.