Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

• A.Refresh Token
• B.Authentication Token
• C.Session ID
• D.Access Token

Comment: *

Name: *

Email: *

Verification: *

A consumer products company uses Salesforce to maintain consumer information, including orders. The company implemented a portal solution using Salesforce Experience Cloud for its consumers where the consumers can log in using their credentials. The company is considering allowing users to login with their Facebook or Linkedln credentials.
Once enabled, what role will Salesforce play?

• A.Facebook and Linkedln will act as the IdPs and SPs.
• B.Salesforce will be the service provider (SP).
• C.Salesforce will be the identity provider (IdP).
• D.Facebook and Linkedln will be the SPs.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community. UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?

• A.IDP-initiated
• B.User-Agent
• C.Web server
• D.Sp-Initiated

Comment: *

Name: *

Email: *

Verification: *

A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can help.
Which two considerations should the architect keep in mind?
Choose 2 answers

• A.AMR field shows the authentication methods used at IdP.
• B.Both OIDC and Security Assertion Markup Language (SAML) are supported but AMR must be implemented at IdP.
• C.High-assurance sessions must be configured under Session Security Level Policies.
• D.Dependency on what is supported by OpenID Connect (OIDC) implementation at IdP.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and corporate identity store.
What type of authentication flow is required to support deep linking'

• A.StartURL on Identity Provider
• B.Identity-Provider-initiated SSO
• C.Web Server OAuth SSO flow
• D.Service-Provider-Initiated SSO

Comment: *

Name: *

Email: *

Verification: *