QUESTION: 129

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials. How can the Architect meet these requirements?

Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.
Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Answer(s): C

Reveal Solution Next Question

QUESTION: 130

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforce, Workday, and SAP HAN A. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs. Which two Salesforce license types does UC need for its employees' Choose 2 answers

Company Community and Identity licenses
Identity and Identity Connect licenses
Chatter Only and Identity licenses
Salesforce and Identity Connect licenses

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 131

Universal Containers built a custom mobile app for their field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature. What should the logout function perform in this scenario, where user sessions are refreshed automatically?

Invoke the revocation URL and pass the refresh token.
Clear out the client Id to stop auto session refresh.
Invoke the revocation URL and pass the access token.
Clear out all the tokens to stop auto session refresh.

Answer(s): A

Reveal Solution Next Question

QUESTION: 132

Universal Containers (UC) would like to enable self-registration for their Salesforce Partner Community Users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values. Which two actions should the Architect recommend to UC1 Choose 2 answers

Configure Registration for Communities to use a custom Visualforce Page.
Modify the SelfRegistration trigger to assign Profile and Account.
Modify the CommunitiesSelfRegController to assign the Profile and Account.
Configure Registration for Communities to use a custom Apex Controller.

Answer(s): A,C

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 33)

QUESTION: 129

QUESTION: 130

QUESTION: 131

QUESTION: 132