An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

• A.Ensure the Callback URL is correctly set in the Connected Apps settings.
• B.Use the browser's Development tools to view the Salesforce page's markup.
• C.Use a browser that has an add-on/extension that can inspect SAML.
• D.Paste the SAML Assertion Validator in Salesforce.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers willutilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

• A.Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.
• B.Use anightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.
• C.Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML toallow SSO.
• D.UseSAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

• A.Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.
• B.Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.
• C.For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.
• D.Create and assign a permission set to all employees that includes "MFA for User Interface Logins."

Comment: *

Name: *

Email: *

Verification: *

universal container plans to develop a custom mobile app for the sales team that will use salesforce for authentication and access management. The mobile app access needs to be restricted to only the sales team.
What would be the recommended solution to grant mobile app access to sales users?

• A.Use connected apps Oauth policies to restrict mobile app access to authorized users.
• B.Use the permission set license to assign the mobile app permission to sales users
• C.Add a new identity provider to authenticate and authorize mobile users.
• D.Use a custom attribute on the user object to control access to the mobile app

Comment: *

Name: *

Email: *

Verification: *

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company*s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers

• A.Use Experience Builder to build branded Reset and Forgot Password pages.
• B.Build custom site pages for reset and forgot password features.
• C.Build custom pages for branding requirements in Experience Cloud.
• D.Login & Registration pages can be branded in the Community Administration settings.

Comment: *

Name: *

Email: *

Verification: *