QUESTION: 73

Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

User-Agent Oauth flow
SAML assertion Oauth flow
User-Token Oauth flow
Web server Oauth flow

Answer(s): B

Reveal Solution Next Question

Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

Use the salesforce REST API to sync users from active directory to salesforce
Use an app exchange product to sync users from Active Directory to salesforce.
Use Active Directory Federation Services to sync users from active directory to salesforce.
Use Identity connect to sync users from Active Directory to salesforce

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 75

Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google Apps from within salesforce through App launcher and connected App set up? Choose 2 answers

Google is the identity provider
Salesforce is the identity provider
Google is the service provider
Salesforce is the service provider

Answer(s): D

Reveal Solution Next Question

QUESTION: 76

Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce. What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?

Include client ID and client secret in the login header callout.
Set up a proxy server for the login service in the DMZ.
Require the use of Salesforce security Tokens on password.
Enforce mutual Authentication between systems using SSL.

Answer(s): C

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 19)

QUESTION: 73

QUESTION: 74

QUESTION: 75

QUESTION: 76