Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.
What should a identity architect recommend to create partners?

• A.Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.
• B.On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.
• C.Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.
• D.Allow partners to register through the IdP and create partner users in Salesforce through an API.

Comment: *

Name: *

Email: *

Verification: *

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company*s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers

• A.Use Experience Builder to build branded Reset and Forgot Password pages.
• B.Build custom site pages for reset and forgot password features.
• C.Login & Registration pages can be branded in the Community Administration settings.
• D.Build custom pages for branding requirements in Experience Cloud.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site?
Choose 2 answers

• A.To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.
• B.To use dynamic branding, the community must be built with the Customer Account Portal template.
• C.An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.
• D.An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?

• A.Use a login flow to query custom SAML attributes and set permission sets.
• B.Use the Apex Just-m-Time handler to query custom SAML attributes and set permission sets.
• C.Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.
• D.Use a login flow to query standard SAML attributes and set permission sets.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud.
NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions.
Which three Salesforce permissions are available to map to AD permissions?
Choose 3 answers

• A.Public Groups
• B.Sharing Rules
• C.Roles
• D.Profiles and Permission Sets
• E.Field-Level Security

Comment: *

Name: *

Email: *

Verification: *