Your organization has an AWS setup and planning to build Single Sign On for users to authenticate with on-premise Microsoft Active Directory Federation Services (ADFS) and let users login to AWS console using AWS STS Enterprise Identity Federation. Which of the following API should be used with AWS STS service after you authenticate with your on-premise?

Answer options:

A.AssumeRoleWithSAML
B.GetFederationToken
C.AssumeRoleWithWebIdentity
D.GetCallerIdentity

Answer: A
https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html