An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used?

• A.OAuth 2.0 User-Agent Flow
• B.SAML Assertion Flow
• C.OAuth 2.0 JWT Bearer Flow
• D.OAuth 2-0 SAML Bearer Assertion Flow

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce.
How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

• A.Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.
• B.Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.
• C.Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.
• D.Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow the employees to post ideas from the Employee portal. When clicking some links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with relevant pages.
What scope should be requested when using the OAuth token to meet this requirement?

• A.web
• B.api
• C.Visualforce
• D.full

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portal where customers can login using their Google account.
NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.
What should an Identity architect do to fulfill the requirement?

• A.Implement a Just-in-Time handler class that has logic to create cases upon first login.
• B.Implement a login flow with a record create component for Case.
• C.Create an authentication provider for Social Login using Google and leverage standard registration handler.
• D.Configure an authentication provider for Social Login using Google and a custom registration handler.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licenses across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process.
Which two recommendations should the Architect make to address the complaints? (Choose two.)

• A.Implement IdP-Initiated Single Sign-on flows to allow deep linking.
• B.Implement SP-Initiated Single Sign-on flows to allow deep linking.
• C.Implement Delegated Authentication from each org to the LDAP provider.
• D.Activate My Domain to brand each org to the specific business use case.

Comment: *

Name: *

Email: *

Verification: *