Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

• A.Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.
• B.Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.
• C.Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.
• D.Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Comment: *

Name: *

Email: *

Verification: *

A technology enterprise is setting up an identity solution with an external vendors wellness application for its employees. The user attributes need to be returned to the wellness application in an ID token.
Which authentication mechanism should an identity architect recommend to meet the requirements?

• A.JWT Bearer Token Flow
• B.OpenID Connect
• C.Web Server Flow
• D.User Agent Flow

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

• A.Use Google Authenticator as an additional part of the login process
• B.Disallow the use of Single Sign-on for any users of the mobile app.
• C.Set Login IP Ranges to the internal network for all of the app users Profiles.
• D.Require High Assurance sessions in order to use the Connected App.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) would like to enable self-registration for their Salesforce Partner Community Users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC? (Choose two.)

• A.Modify the SelfRegistration trigger to assign Profile and Account.
• B.Modify the CommunitiesSelfRegController to assign the Profile and Account.
• C.Configure Registration for Communities to use a custom Visualforce Page.
• D.Configure Registration for Communities to use a custom Apex Controller.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

• A.The "Redirect to identity provider" option has not been selected the SAML configuration.
• B.The user has not configured the salesforce1 mobile app to use my domain for login
• C.The user has notbeen granted the "Enable single Sign-on" permission
• D.The "Redirect to Identity Provider" option has been selected in the my domain configuration.

Comment: *

Name: *

Email: *

Verification: *