QUESTION: 89

Universal containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use salesforce ideas and provide the ability for employees to post ideas from the company portal. They use SAML-BASED SSO to get into the company portal and would like to leverage it to access salesforce. Most of the users don't exist in salesforce and they would like the user records created in salesforce communities the first time they try to access salesforce. What recommendation should an architect make to meet this requirement?

Use on-the-fly provisioning
Use just-in-time provisioning
Use salesforce APIs to create users on the fly
Use Identity connect to sync users

Answer(s): B

Reveal Solution Next Question

QUESTION: 90

Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

Configure SAML SSO settings.
Configure Delegated Authentication
Create a connected App
Set up my domain

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 91

Universal containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users. Which three items should UC take into consideration while building the Web service to handle the Delegated Authentication request? Choose 3 answers

The web service needs to include Source IP as a method parameter.
UC should whitelist all salesforce ip ranges on their corporate firewall.
The web service can be written using either the soap or rest protocol.
Delegated Authentication is enabled for the system administrator profile.
The return type of the Web service method should be a Boolean value

Answer(s): A,B,E

Reveal Solution Next Question

QUESTION: 92

Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store. What type of Authentication flow is required to support deep linking?

Web server Oauth SSO flow.
Identity-provider-initiated SSO
Service-provider-initiated SSO
Start URL on identity provider

Answer(s): C

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 23)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92