Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

• A.Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.
• B.Create an apex scheduled job in one org that will synchronize the other orgs profile.
• C.Implement Delegated Authentication that will update the user profiles as necessary.
• D.Implement an Oauthjwt flow to pass the profile credentials between systems.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

• A.Configure SAML SSO settings.
• B.Configure Delegated Authentication
• C.Create a connected App
• D.Set up my domain

Comment: *

Name: *

Email: *

Verification: *

A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors?
Choose 2 answers

• A.The subject element ismissing from the assertion sent to salesforce.
• B.The certificate loaded into SSO configuration does not match the certificate used by the IdP.
• C.The current time setting of the company's identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.
• D.The assertion sent to 5alesforce contains an assertion ID previously used.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers

• A.Enable access to person and business account record types under Public Access Settings.
• B.Contact Salesforce Support to enable business accounts.
• C.Under Login and Registration settings, ensure that the default account field is empty.
• D.Contact Salesforce Support to enable person accounts.
• E.Set organization-wide default sharing for Contact to Public Read Only.

Comment: *

Name: *

Email: *

Verification: *

In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?

• A.RedirectURL
• B.DisplayState
• C.RelayState
• D.StartURL

Comment: *

Name: *

Email: *

Verification: *