Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups.
Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

• A.Use Identity connect to sync users from Active Directory to salesforce
• B.Use the salesforce REST API to sync users from active directory to salesforce
• C.Use Active Directory Federation Services to sync users from active directory to salesforce.
• D.Use an app exchange product to sync users from Active Directory to salesforce.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO's Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?

• A.Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.
• B.Configure an authentication provider to delegate authentication to the LDAP directory.
• C.Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.
• D.use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

Comment: *

Name: *

Email: *

Verification: *

Universal containers(UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application. How can an architect support fingerprints as a form of identification for salesforce Authentication?

• A.Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
• B.Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.
• C.Use custom login flows with callouts to a third-party fingerprint scanning application.
• D.Use Delegated Authentication with callouts to a third-party fingerprint scanning application.

Comment: *

Name: *

Email: *

Verification: *

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

• A.Consolidate Partner related information in a single org and provide access through Salesforce community.
• B.Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.
• C.Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.
• D.Register partners in one org and access information from other orgs using APIs.

Comment: *

Name: *

Email: *

Verification: *

An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.
What is recommended to fulfill this requirement with the least amount of customization?

• A.Use Login Flows to add a screen that shows personalized alerts.
• B.Create custom metadata that stores user alerts and use a LWC to display alerts.
• C.Build a Lightning web Component (LWC) for a homepage that shows custom alerts.
• D.Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.

Comment: *

Name: *

Email: *

Verification: *