Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers

• A.Create a custom external authentication provider for Twitter.
• B.Configure a predefined authentication provider for Facebook.
• C.Create a custom external authentication provider for Facebook.
• D.Configure a predefined authentication provider for Twitter.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

• A.Set up a proxy service for the login service in the DMZ.
• B.Include Client Id and Client Secret in the login header callout.
• C.Enforce mutual authentication between systems using SSL.
• D.Require the use of Salesforce security tokens on passwords.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is successfully using Delegated Authentication for their Salesforce users. The service supporting Delegated Authentication is written in Java. UC has a new CIO that is requiring all company web services be REST-ful and written in .Net.
Which two considerations should the UC Architect provide to the new CIO? (Choose two.)

• A.Delegated Authentication will not work with a .Net service.
• B.Delegated Authentication will continue to work with a .Net service.
• C.Delegated Authentication will continue to work with REST services.
• D.Delegated Authentication will not work with REST services.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don't exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?

• A.Use Identity Connect to sync users.
• B.Use Just-in-Time provisioning.
• C.Use On-the-Fly provisioning.
• D.Use Salesforce APIs to create users on the fly.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP.
After some evaluation, UC decides NOT to 65 set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

• A.Neither SP- nor IdP-initiated SSO will work.
• B.SP-initiated SSO will NOT work
• C.IdP-initiated SSO will NOT work.
• D.Either SP- or IdP-initiated SSO will work.

Comment: *

Name: *

Email: *

Verification: *