Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licences across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process. Which two recommendations should the Architect make to address the Complaints? Choose 2 answers

• A.Implement SP-Initiated Single Sign-on flows to allow deep linking.
• B.Activate My Domain to Brand each org to the specific business use case.
• C.Implement IdP-Initiated Single Sign-on flows to allow deep linking.
• D.Implement Delegated Authentication from each org to the LDAP provider.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) is setting up Salesforce to authenticate users with an external identity provider. The NTO Salesforce Administrator is having trouble getting things setup.
What should an identity architect use to show which part of the login assertion is fading?

• A.Security Assertion Markup Language Validator
• B.Connected App Manager
• C.SAML Metadata file importer
• D.Identity Provider Metadata download

Comment: *

Name: *

Email: *

Verification: *

Which two statements are capable of Identity Connect? Choose 2 answers

• A.Support multiple orgs connecting to multiple Active Directory servers.
• B.Synchronization ofSalesforce Permission Set Licence Assignments.
• C.Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
• D.Automated user synchronization and de-activation.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.
How should an identity architect implement this requirement?

• A.Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.
• B.Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
• C.Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
• D.Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time (JIT) provisioning.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

• A.Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.
• B.Scope - Deny refresh_token scope for this connected app.
• C.Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.
• D.Session Policy - Set timeout value of the connected app to 7 days.

Comment: *

Name: *

Email: *

Verification: *