In a scenario with a newly configured AAA virtual server SAML_SP that is DOWN, which action is indicated as the fix?

• A. Bind the Certificate to the virtual server SAML_SP.
• B. The LDAP server is NOT bound to the virtual server SAML_SP.
• C. Services are NOT bound to the virtual server SAML_SP.
• D. An AAA policy is NOT bound to the virtual server SAML_SP.

Answer: (A)

Binding a certificate to the SAML_SP AAA virtual server is essential because this vserver serves HTTPS traffic for the SAML flow. Without a bound TLS certificate, the virtual server cannot complete the TLS handshake, so it cannot respond to client requests and remains DOWN. Once a valid certificate and key are bound, TLS can be established, the vserver comes up, and SAML authentication can proceed. The other bindings (LDAP, services, AAA policy) are important for full operation, but they don’t resolve the TLS/SSL startup issue that causes the vserver to be DOWN in this scenario.