An architect has successfully configured SAML-BASED SSO for universal containers. SSO has been working for 3 months when Universal containers manually adds a batchof new users to salesforce. The new users receive an error from salesforce when trying to use SSO. Existing users are still able to successfully use SSO to access salesforce. What is the probable cause of this behaviour?

• A.The new users do not have the SSO permission enabled on their profiles.
• B.The Federation ID field on the new user records is not correctly set
• C.The administrator forgot to reset the new user's salesforce password.
• D.The my domain capability is not enabled on the new user's profile.

Comment: *

Name: *

Email: *

Verification: *

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).
When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC or SAML?

• A.OIDC is more secure than SAML and therefore is the obvious choice.
• B.If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.
• C.They are equivalent protocols and there is no real reason to choose one over the other.
• D.The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty data. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose
2 answers

• A.Use hidden fields populated via java script events in the self-registration page.
• B.Use open-ended security questions and complex password requirements
• C.Primarily use lookup and picklist fields on the self registration page.
• D.Require a captcha at the end of the self-registration process.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

• A.Build an integration that queries LDAP periodically and creates new active users in Salesforce.
• B.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.
• C.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
• D.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.

Comment: *

Name: *

Email: *

Verification: *

An Architect needs to advise the team that manages the Identity Provider how to differentiate Salesforce from other Service Providers.
What SAML SSO setting in Salesforce provides this capability?

• A.SAML Identity Location
• B.Entity Id
• C.Identity Provider Login URL
• D.Issuer

Comment: *

Name: *

Email: *

Verification: *