Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers

• A.Set the Refresh Token Policy to expire refresh token after 3 months.
• B.Set Permitted Users to "All users may self-authorize".
• C.Set the Session Timeout value to 3 months.
• D.Set Permitted Users to "Admin approved users are pre-authorized".

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an externalidentity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.
What should a identity architect recommend to create partners?

• A.On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.
• B.Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.
• C.Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.
• D.Allow partners to register through the IdP and create partner users in Salesforce through an API.

Comment: *

Name: *

Email: *

Verification: *

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

• A.Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.
• B.Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-
• C.Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.
• D.Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self- service. Guests of the portal be able toself-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have been purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate accountand contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

• A.Enable "Allow customers and partners to self-register".
• B.Select the "Configurable Self-Reg Page" optionunder Login & Registration.
• C.Set jp an external login page and call Salesforce APIs for user creation.
• D.Customize the self-registration Apex handler to temporarily associate the user to a shared single contact record.
• E.Customize me self-registrationApex handler to create only the user record.

Comment: *

Name: *

Email: *

Verification: *

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

• A.Referenceto a URL redirect parameter at the identity provider.
• B.Reference to a URL redirect parameter at the service provider.
• C.Reference to the login address URL of the service provider.
• D.Reference to the login address URL of the identity Provider.

Comment: *

Name: *

Email: *

Verification: *