Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO- branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses. However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

• A.Create a full sandbox to replicate the portal site and update the branding accordingly.
• B.Implement Experience ID in the code and extend the URLs and endpoints, as required.
• C.Use Heroku to build the new brand site and embedded login to reuse identities.
• D.Configure an additional community site on the same org that is dedicated for the new brand.

Comment: *

Name: *

Email: *

Verification: *

A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce
.
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

• A.Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
• B.Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.
• C.Redirect the user to a custom page that allows the user to select an existing social identity for login.
• D.Use the custom registration handler to link social identities to Salesforce identities.

Comment: *

Name: *

Email: *

Verification: *

How should an identity architect automate provisioning and deprovisioning of users into Salesforce from an external system?

• A.Call SOAP API upsertQ on user object.
• B.Use Security Assertion Markup Language Just-in-Time (SAML JIT) on incoming SAML assertions.
• C.Run registration handler on incoming OAuth responses.
• D.Call OpenID Connect (OIDC)-userinfo endpoint with a valid access token.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration supports the company's single sign-on process to Salesforce, Which Salesforce OAuth authorization flow should be used?

• A.OAuth 2.0 SAML Bearer AssertionFlow
• B.A SAML Assertion Row
• C.OAuth 2.0 User-Agent Flow
• D.OAuth 2.0 JWT Bearer Flow

Comment: *

Name: *

Email: *

Verification: *

An architect has successfully configuredSAML-BASED SSO for universal containers. SSO has been working for 3 months when Universal containers manually adds a batch of new users to salesforce. The new users receive an error from salesforce when trying to use SSO. Existing users are still able to successfully use SSO to access salesforce. What is the probable cause of this behaviour?

• A.The administrator forgot to reset the new user's salesforce password.
• B.The Federation ID field on the new user records is not correctly set
• C.The my domaincapability is not enabled on the new user's profile.
• D.The new users do not have the SSO permission enabled on their profiles.

Comment: *

Name: *

Email: *

Verification: *