A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents. An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

• A.Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.
• B.Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.
• C.Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.
• D.Select "Enable as a Canvas Personal App" in the connected app settings.

Comment: *

Name: *

Email: *

Verification: *

What item should an Architect consider when designing a Delegated Authentication implementation?

• A.The web service should use the Salesforce Federation ID to identify the user.
• B.The Web service should be secured with TLS using Salesforce trusted certificates.
• C.The Web service should implement a custom password decryption method.
• D.The Web service should be able to accept one to four input method parameters.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers

• A.Configure a predefined authentication provider for Twitter.
• B.Configure a predefined authentication provider for Facebook.
• C.Create a custom external authentication provider for Facebook.
• D.Create a custom external authentication provider for Twitter.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to salesforce to upload the e-signatures as a file attachment and uses Oauth protocol for both Authentication and authorization. What is the most recommended and secure Oauth scope setting that an architect should recommend?

• A.API
• B.Id
• C.Web
• D.Custom_permissions

Comment: *

Name: *

Email: *

Verification: *

Universal Containers built a custom mobile app for their field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature.
What should the logout function perform in this scenario, where user sessions are refreshed automatically?

• A.Clear out the client Id to stop auto session refresh.
• B.Invoke the revocation URL and pass the refresh token.
• C.Invoke the revocation URL and pass the access token.
• D.Clear out all the tokens to stop auto session refresh.

Comment: *

Name: *

Email: *

Verification: *