Which three are features of federated Single sign-on solutions? Choose 3 Answers

• A.It establishes trust between Identity Store and Service Provider.
• B.It improves affiliated applications adoption rates.
• C.It solves all identity and access management problems.
• D.It enables quick and easy provisioning and deactivating of users.
• E.It federates credentials control to authorized applications.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is looking to purchase a third-party application as an Identity Provider. UC is looking to develop a business case for the purchase in general and has enlisted an Architect for advice. Which two capabilities of an Identity Provider should the Architect detail to help strengthen the business case?
Choose 2 answers

• A.The Identity Provider can authenticate multiple social media accounts.
• B.The Identity Provider can authenticate multiple applications.
• C.The Identity Provider can centralize enterprise password policy.
• D.The Identity provider can store credentials for multiple applications.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses the Customer 360 Platform implemented on Salesforce Experience Cloud. The development team in charge has learned of a contactless user feature, which can reduce the overhead of managing customers and partners by creating users without contact information.
What is the potential impact to the architecture if NTO decides to implement this feature?

• A.Contactless user feature is available only with the External Identity license, which can restrict the Experience Cloud functionality available to the user.
• B.Passwordless authentication can not be supported because the mobile phone receiving one-time password (OTP) needs to match the number on the contact record.
• C.Custom registration handler is needed to correctly assign External Identity or Community license for the newly registered contactless user.
• D.If contactless user is upgraded to Community license, the contact record is automatically created and linked to the user record, but not associated with an Account.

Comment: *

Name: *

Email: *

Verification: *

A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors?
Choose 2 answers

• A.The assertion sent to 5alesforce contains an assertion ID previously used.
• B.The current time setting of the company's identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.
• C.The subject element is missing from the assertion sent to salesforce.
• D.The certificate loaded into SSO configuration does not match the certificate used by the IdP.

Comment: *

Name: *

Email: *

Verification: *

customer service representatives at Universal containers (UC) are complaining that whenever they click on links to case records and are asked to login with SAML SSO, they are being redirected to the salesforce home tab and not the specific case record. What item should an architect advise the identity team at UC to investigate first?

• A.The salesforce SSO settings are using http post
• B.My domain is configured and active within salesforce.
• C.The identity provider is correctly preserving the Relay state
• D.The users have the correct Federation ID within salesforce.

Comment: *

Name: *

Email: *

Verification: *