A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents.
An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

• A.Select "Enable as a Canvas Personal App" in the connected app settings.
• B.Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.
• C.Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.
• D.Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

• A.Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.
• B.Create an apex scheduled job in one org that will synchronize the other orgsprofile.
• C.Implement Delegated Authentication that will update the user profiles as necessary.
• D.Implement an Oauthjwt flow to pass the profile credentials between systems.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is using its production org as the identity provider for a new Experience Cloud site and the identity architect is deciding which login experience to use for the site.
Which two page types are valid login page types for the site?
Choose 2 answers

• A.Experience Builder Page
• B.lightning Experience Page
• C.Embedded Login Page
• D.Login Discovery Page

Comment: *

Name: *

Email: *

Verification: *

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company*s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers

• A.Login & Registration pages can be branded in the Community Administration settings.
• B.Use Experience Builder to build branded Reset and Forgot Password pages.
• C.Build custom site pages for reset and forgot password features.
• D.Build custom pages for branding requirements in Experience Cloud.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) employees havesalesforce access from restricted ip ranges only, to protect against unauthorized access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location.
Which two options should an architect recommend? Choose 2 answers

• A.Relax the ip restriction in the connect app settings for the salesforce1 mobile app
• B.Use login flow to bypass ip range restriction for the mobile app.
• C.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• D.Remove existing restrictions on ip ranges for all types of user access.

Comment: *

Name: *

Email: *

Verification: *