When users are authenticated using SAML, what are the two most efficient ways of provisioning...

SAML authenticates the user at login time, but efficient user provisioning needs automated lifecycle mechanisms. SCIM synchronizes users, groups, and attributes from the IdP, while SAML auto-provisioning/JIT can create users dynamically during successful authentication. Option D (SCIM and SAML Autoprovisioning) is correct because SCIM and SAML auto-provisioning are the efficient provisioning methods.

Why the other options are incorrect:

A. Hosted User Database and Directory Server Synchronization: A hosted user database is manual or local account storage; it does not automate lifecycle changes as cleanly as SCIM/JIT.

B. SAML and Hosted User Database: SAML can create users at sign-in with JIT, but by itself it is an authentication assertion, not continuous lifecycle synchronization like SCIM.

C. SCIM and Directory Server Synchronization: SCIM provisions and synchronizes users, groups, and attributes between an identity provider and Zscaler.