Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don't exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?

• A.Use On-the-Fly provisioning.
• B.Use Salesforce APIs to create users on the fly.
• C.Use Identity Connect to sync users.
• D.Use Just-in-Time provisioning.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have bee purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

• A.Select the "Configurable Self-Reg Page" option under Login & Registration.
• B.Set jp an external login page and call Salesforce APIs for user creation.
• C.Enable "Allow customers and partners to self-register".
• D.Customize me self-registration Apex handler to create only the user record.
• E.Customize the self-registration Apex handler to temporarily associate the user to a shared single contact record.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC's middleware authenticate to Salesforce while adhering to this requirement?

• A.Create a Connected App that supports the Refresh Token OAuth Flow
• B.Create a Connected App that supports the Web Server OAuth Flow.
• C.Create a Connected App that supports the User-Agent OAuth Flow.
• D.Create a Connected App that supports the JWT Bearer Token OAuth Flow.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licences across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process. Which two recommendations should the Architect make to address the Complaints?
Choose 2 answers

• A.Implement SP-Initiated Single Sign-on flows to allow deep linking.
• B.Implement Delegated Authentication from each org to the LDAP provider.
• C.Implement IdP-Initiated Single Sign-on flows to allow deep linking.
• D.Activate My Domain to Brand each org to the specific business use case.

Comment: *

Name: *

Email: *

Verification: *

How should an identity architect automate provisioning and deprovisioning of users into Salesforce from an external system?

• A.Run registration handler on incoming OAuth responses.
• B.Use Security Assertion Markup Language Just-in-Time (SAML JIT) on incoming SAML assertions.
• C.Call SOAP API upsertQ on user object.
• D.Call OpenID Connect (OIDC)-userinfo endpoint with a valid access token.

Comment: *

Name: *

Email: *

Verification: *