A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

• A.Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.
• B.Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.
• C.Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.
• D.Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-

Comment: *

Name: *

Email: *

Verification: *

A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

• A.Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
• B.Redirect the user to a custom page that allows the user to select an existing social identity for login.
• C.Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.
• D.Use the custom registration handler to link social identities to Salesforce identities.

Comment: *

Name: *

Email: *

Verification: *

Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers

• A.Use a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system
• B.Use a trusted CA-signed certificate for salesforce and a self-signed cert for the external system
• C.Use a self-signed certificate for salesforce and a self-signed cert for the external system
• D.Use a self-signed certificate for salesforce and a trusted CA-signed cert for the external system

Comment: *

Name: *

Email: *

Verification: *

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

• A.A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-Domain Identity Management) for provisioning and deprovisioning of users.
• B.Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning and deprovisioning of users.
• C.Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.
• D.Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) would like to enable self - registration for their salesforcepartner community users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers

• A.Modify the selfregistration trigger to assign profile and account.
• B.Configure registrationfor communities to use a custom apex controller.
• C.Modify the communitiesselfregcontroller to assign the profile and account.
• D.Configure registration for communities to use a custom visualforce page.

Comment: *

Name: *

Email: *

Verification: *