Free Salesforce Identity-and-Access-Management-Designer Exam Dumps Questions & Answers

What are three capabilities of Delegated Authentication? Choose 3 answers

• A.It can be assigned by Permission Sets.
• B.It can connect to SOAP services.
• C.It can connect to REST services.
• D.It can be assigned by Profiles.
• E.It can be assigned by Custom Permissions.

An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community. What portion of the authentication provider setup associates a Facebook user with a salesforce user?

• A.Apex registration handler
• B.User info endpoint URL
• C.Federation ID
• D.Consumer key and consumer secret

An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?

• A.Confirm performance considerations with Salesforce Customer Support due to high peaks.
• B.Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
• C.Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
• D.Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.

Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled "User Provisioning" on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?

• A.Required operation(s) was not mapped in User Provisioning Settings.
• B.Salesforce roles have more than three levels in the role hierarchy.
• C.User Provisioning for Connected Apps does not support role sync.
• D.The Approval queue for User Provisioning Requests is unmonitored.

Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

• A.Api
• B.Web
• C.Id
• D.Custom_permissions