Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

• A.Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
• B.Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
• C.Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.
• D.Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

• A.Set up My Domain.
• B.Configure Delegated Authentication.
• C.Configure SAML SSO settings.
• D.Create a Connected App.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

• A.Use JIT Provisioning to automatically create the account in the accounting system.
• B.Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.
• C.Create a custom application on Heroku that manages the sign-on process from Facebook.
• D.Add an Apex callout in the registration handler of the authorization provider.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate?Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate?

• A.Verify that the Callback URL is correctly pointing to the new URI Scheme.
• B.Validate that the users are checking the box to remember their passwords.
• C.Confirm that the access Token's Time-To-Live policy has been set appropriately.
• D.Check the Refresh Token policy defined in the Salesforce Connected App.

Comment: *

Name: *

Email: *

Verification: *

Sales users at Universal containers use salesforce for Opportunity management. Marketing uses a third-party application called Nest for Lead nurturing that is accessed using username/password. The VP of sales wants to open up access to nest for all sales uses to provide them access to lead history and would like SSO for better adoption. Salesforce is already setup for SSO and uses Delegated Authentication. Nest can accept username/Password or SAML-based Authentication. IT teams have received multiple password-related issues for nest and have decided to set up SSO access for Nest for Marketing users as well. The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose. Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication?
Choose 2 answers

• A.Salesforce license for sales users and External Identity license for Marketing users
• B.Salesforce license for sales users and Identity license for Marketing users
• C.Salesforce license for sales users and platform license for Marketing users.
• D.Identity license for sales users and Identity connect license for Marketing users

Comment: *

Name: *

Email: *

Verification: *