QUESTION: 81

Universal containers (UC) has implemented SAML SSO to enable seamless access across multiple applications. UC has regional salesforce orgs and wants it's users to be able to access them from their main Salesforce org seamless. Which action should an architect recommend?

Configure the main salesforce org as an Authentication provider.
Configure the main salesforce org as the Identity provider.
Configure the regional salesforce orgs as Identity Providers.
Configure the main Salesforce org as a service provider.

Answer(s): B

Reveal Solution Next Question

QUESTION: 82

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps? Choose 2 answers

Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 83

Which three are capabilities of SAML-based Federated authentication? Choose 3 answers

Trust relationships between Identity Provider and Service Provider are required.
SAML tokens can be in XML or JSON format and can be used interchangeably.
Web applications with no passwords are more secure and stronger against attacks.
Access tokens are used to access resources on the server once the user is authenticated.
Centralized federation provides single point of access, control and auditing.

Answer(s): A,D,E

Reveal Solution Next Question

QUESTION: 84

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also leveraging the App Launcher to let customers access an of platform application for generating shipping labels. The label generator application uses OAuth to provide users access. What license type should an Architect recommend for the customers?

Customer Community license
Identity license
Customer Community Plus license
External Identity license

Answer(s): B

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 21)

QUESTION: 81

QUESTION: 82

QUESTION: 83

QUESTION: 84