QUESTION: 105

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership. What would be the optimal way to implement SSO?

Use Active Directory with Reverse Proxy as the Identity Provider.
Use Microsoft Access control Service as the Authentication provider.
Use Active Directory Federation Service (ADFS) as the Identity Provider.
Use Salesforce Identity Connect as the Identity Provider.

Answer(s): D

Reveal Solution Next Question

QUESTION: 106

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

Identity Licence.
Salesforce Licence.
External Identity Licence.
Salesforce Platform Licence.

Answer(s): D

Reveal Solution Next Question

QUESTION: 107

Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to reauthenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate?Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate?

Check the Refresh Token policy defined in the Salesforce Connected App.
Validate that the users are checking the box to remember their passwords.
Verify that the Callback URL is correctly pointing to the new URI Scheme.
Confirm that the access Token's Time-To-Live policy has been set appropriately.

Answer(s): A

Reveal Solution Next Question

QUESTION: 108

Universal Containers (UC) wants to build a mobile application that twill be making calls to the Salesforce REST API. UC's Salesforce implementation relies heavily on custom objects and custom Apex code. UC does not want its users to have to enter credentials every time they use the app. Which two scope values should an Architect recommend to UC? Choose 2 answers.

Custom_permissions
Api
Refresh_token
Full

Answer(s): B,C

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 27)

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108