QUESTION: 57

Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers

Configure the Embedded Web Browser to use My Domain URL.
Configure the Salesforce1 App to use the MY Domain URL.
Use the existing SAML-SSO flow along with User Agent Flow.
Use the existing SAML SSO flow along with Web Server Flow.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 58

Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

The Federation ID must be a valid Salesforce Username
The Federation ID must is case sensitive
The Federation ID must be in the form of an email address.
The Federation ID must be populated on the user record.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 59

Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

OAuth Refresh Token Flow
OAuth Username-Password Flow
OAuth SAML Bearer Assertion Flow
OAuth JWT Bearer Token Flow

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 60

Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers

Use a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system
Use a trusted CA-signed certificate for salesforce and a self-signed cert for the external system
Use a self-signed certificate for salesforce and a self-signed cert for the external system
Use a self-signed certificate for salesforce and a trusted CA-signed cert for the external system

Answer(s): C,D

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 15)

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60