which three are features of federated Single Sign-on solutions? Choose 3 answers

• A.It federates credentials control to authorized applications.
• B.It solves all identity and access management problems.
• C.It improves affiliated applications adoption rates.
• D.It establishes trust between Identity store and service provider.
• E.It enables quick and easy provisioning and deactivating of users.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are capable of Identity Connect? Choose 2 answers

• A.Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
• B.Automated user synchronization and de-activation.
• C.Support multiple orgs connecting to multiple Active Directory servers.
• D.Synchronization ofSalesforce Permission Set Licence Assignments.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses a legacy Employee portal for their employees to collaborate and post their ideas. UC decides to use Salesforce Ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC decides to push ideas posted on the Employee portal to Salesforce through API. UC decides to use an API user using OAuth Username-Password flow for the connection. How can the connection to Salesforce be restricted only to the Employee portal server?

• A.Use a digital certificate signed by the Employee portal server.
• B.Add the Employee portal's IP address to the Login IP range on the user profile.? May two answers
• C.Use a dedicated profile for the user the Employee portal user.
• D.Add the Employee portal's IP Address to the trusted IP range for the Connected App.

Comment: *

Name: *

Email: *

Verification: *

An identity architect is implementing a mobile-first Consumer Identity Access Management (CIAM) for external users. User authentication is the only requirement. The users email or mobile phone number should be supported as a username.
Which two licenses are needed to meet this requirement?
Choose 2 answers

• A.External Identity Licenses
• B.SMS verification Credits
• C.Email Verification Credits
• D.Identity Connect Licenses

Comment: *

Name: *

Email: *

Verification: *

The security team at Universal Containers (UC) hasidentified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so.
For all other users of Salesforce, users should be allowed to use AD Credentials orSalesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

• A.Use SAML federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.
• B.Use SAML federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports Permission.
• C.Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically and or remove a permission set that grants the Export Reports Permission.
• D.Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.

Comment: *

Name: *

Email: *

Verification: *