Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

• A.JWT Bearer Token flow
• B.Refresh Token flow
• C.Web Service flow
• D.SAML Bearer Assertion flow

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

• A.Identity Connect will not support user provisioning in UC's current environment.
• B.Identity Connect will only support Idp-initiated SAML flows in UC'scurrent environment.
• C.Identity Connect will only support SP-initiated SAML flows in UC's current environment.
• D.Identity connect is not compatible with UC's current identity environment.

Comment: *

Name: *

Email: *

Verification: *

How should an Architect force user to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

• A.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.
• B.Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
• C.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.
• D.Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.

Comment: *

Name: *

Email: *

Verification: *

architect is troubleshooting some SAML-based SSO errors during testing. The Architect confirmed that all of the Salesforce SSO settings are correct. Which two issues outside of the Salesforce SSO settings are most likely contributing to the SSO errors the Architect is encountering? Choose 2 Answers

• A.The Identity Provider is also used to SSO into five other applications.
• B.The clock on the Identity Provider server is twenty minutes behind Salesforce.
• C.The Issuer Certificate from the Identity Provider expired two weeks ago.
• D.The default language for the Identity Provider and Salesforce are Different.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance. Several service providers have been setup and integrated with Salesforce using OpenID Connect to allow for a seamless single sign-on experience. UC has a requirement to limit users to sign on directly from the Salesforce org to the external Service provider app that accepts OpenID Connect.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

• A.Manage which connected apps a user has access to by assigning authentication providers to the users profile.
• B.Assign the connected app to the customer community, and enable the users profile in the Community settings.
• C.Set each of the Connected App access settings to Admin Pre-Approved.
• D.Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

Comment: *

Name: *

Email: *

Verification: *