Q1 Single choice Flag When using SAML, where does user authentication occur? A Splunk generates a SAML assertion that authenticates the user. B The Service Provider (SP) decodes the SAML request and authenticates the user. C The Identity Provider (IDP) decodes the SAML request and authenticates the user. D The Service Provider (SP) generates a SAML assertion that authenticates the user. Correct answer