Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

• A.Web Server Authentication Flow
• B.User Agent Flow
• C.JWT Bearer Token Flow
• D.Username and Password Flow

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has built a custom based Two-factor Authentication (2fa) system for their existing on-premise applications. Thru are now implementing salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution an architect should consider?

• A.Replace the custom 2fa system with an app exchange app that supports on-premise applications and salesforce.
• B.Use custom login flows to connect to the existing custom 2fa system for use in salesforce.
• C.Replace the custom 2fa system with salesforce 2fa for on-premise application and salesforce.
• D.Use the custom 2fa system for on-premise applications and native 2fa for salesforce.

Comment: *

Name: *

Email: *

Verification: *

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

• A.Reference to the login address URL of the identity Provider.
• B.Reference to a URL redirect parameter at the service provider.
• C.Reference to the login address URL of the service provider.
• D.Reference to a URL redirect parameter at the identity provider.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65 set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

• A.Either SP- or IdP-initiated SSO will work.
• B.Neither SP- nor IdP-initiated SSO will work.
• C.IdP-initiated SSO will NOT work.
• D.SP-initiated SSO will NOT work

Comment: *

Name: *

Email: *

Verification: *

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

• A.Use a HTTP POST to request the refresh token for the current user.
• B.Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.
• C.Enable Single Logout with a secure logout URL.
• D.Use a HTTP POST to make a call to the revoke token endpoint.

Comment: *

Name: *

Email: *

Verification: *