- All Exams Instant Download
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?
Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser andCRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider. Mow should an identity architect ensure the...
What SAML SSOsetting in Salesforce provides this capability?
An Architect needs to advise the team that manages the Identity Provider how to differentiate Salesforce from other Service Providers . What SAML SSOsetting in Salesforce provides this capability?A . Identity Provider Login URL. B. Issuer. C. Entity Id D. SAML Identity Location.View AnswerAnswer: C
What certificate is sent along with the Outbound Message?
Universal Containers (UC) wants its closed Won opportunities to be synced to a Datawarehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is secure . What certificate is sent along with the...
Which two actions should an identity architect recommend to meet these requirements?
Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials. Which two actions should an identity architect recommend to meet these requirements? Choose 2...
What is the most likely cause of the issue?
Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having toenter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take...
Which OAuth flow should be used to fulfill the requirement?
An identity architect is setting up an integration between Salesforceand a third-party system. The third-party system needs to authenticate to Salesforce and then make API calls against the REST API. One of the requirements is that the solution needs to ensure the third party service providers connected app in Salesforce...
Which OAuth flow should be used to meet these requirements?
A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements: 1) Customer purchases the device. 2) Customer registers the device using their mobile app. 3) A case should automatically becreated in Salesforce and associated with the customers account in cases where the device...
What scope should be requested when using the Oauth token to meet this requirement?
Universal containers (UC) uses a home-grown employee portal for their employees to collaborate. UC decides to use salesforce ideas to allow the employees to post ideas from the employee portal. When clicking some links in the employee portal, the users should be redirected to salesforce, authenticated, and presented with relevant...
When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?
When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?A . The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL...
What should the architect recommend to allow salesforce profiles to be managed from a central system of record?
Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles . What should the architect recommend to allow salesforce profiles to be managed from a central system of record?A . Implement jit provisioning on the SAML IDP that will pass...
