QUESTION: 25

Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

Use the same SAML Identity location as the first org.
Use a different Entity ID than the first org.
Use the same request bindings as the first org.
Use the Salesforce Username as the SAML Identity Type.

Answer(s): B

Reveal Solution Next Question

QUESTION: 26

Universal Containers (UC) has decided to use Salesforce as an Identity Provider for multiple external applications. UC wants to use the salesforce App Launcher to control the Apps that are available to individual users. Which three steps are required to make this happen?

Add each connected App to the App Launcher with a Start URL.
Set up an Auth Provider for each External Application.
Set up Salesforce as a SAML Idp with My Domain.
Set up Identity Connect to Synchronize user data.
Create a Connected App for each external application.

Answer(s): A,C,E

Reveal Solution Next Question

QUESTION: 27

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

Ensure the Callback URL is correctly set in the Connected Apps settings.
Use a browser that has an add-on/extension that can inspect SAML.
Paste the SAML Assertion Validator in Salesforce.
Use the browser's Development tools to view the Salesforce page's markup.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 28

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

Identity Connect will not support user provisioning in UC's current environment.
Identity Connect will only support Idp-initiated SAML flows in UC's current environment.
Identity Connect will only support SP-initiated SAML flows in UC's current environment.
Identity connect is not compatible with UC's current identity environment.

Answer(s): A

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28