Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

• A.SAML Identity Provider
• B.OAuth Client
• C.SAML Service Provider
• D.OAuth Resource Server

Comment: *

Name: *

Email: *

Verification: *

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site?
Choose 2 answers

• A.To use dynamic branding, the community must be built with the Customer Account Portal template.
• B.An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.
• C.To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.
• D.An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has five Salesforce orgs (UC1, UC2, UC3, UC4, UC5). of Every user that is in UC2, UC3, UC4, and UC5 is also in UC1, however not all users 65* have access to every org. Universal Containers would like to simplify the authentication process such that all Salesforce users need to remember one set of credentials. UC would like to achieve this with the least impact to cost and maintenance. What approach should an Architect recommend to UC?

• A.Configure UC1 as the Identity Provider to the other four Salesforce orgs, but don't set up JIT user provisioning for other orgs.
• B.Purchase a third-party Identity Provider for all five Salesforce orgs to use, but don't set up JIT user provisioning for other orgs.
• C.Configure UC1 as the Identity Provider to the other four Salesforce orgs and set up JIT user provisioning on all other orgs.
• D.Purchase a third-party Identity Provider for all five Salesforce orgs to use and set up JIT user provisioning on all other orgs.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) would like to enable self - registration for their salesforcepartner community users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers

• A.Modify the communitiesselfregcontroller to assign the profile and account.
• B.Configure registrationfor communities to use a custom apex controller.
• C.Configure registration for communities to use a custom visualforce page.
• D.Modify the selfregistration trigger to assign profile and account.

Comment: *

Name: *

Email: *

Verification: *

An Architect has successfully configured SAML-based SSO for Universal Containers. SSO has been working for 3 months when Universal Containers manually adds a batch of new users to Salesforce. The new users receive an error from Salesforce when trying to use SSO. Existing users are still able to successfully use SSO to access Salesforce.
What is the likely cause of this behavior?

• A.The My Domain capability is NOT enabled on the new user's profile.
• B.The Federation ID field on the new User records is NOT correctly set.
• C.The administrator forgot to reset the new user's Salesforce password.
• D.The new users do NOT have the SSO permission enabled on their profiles.

Comment: *

Name: *

Email: *

Verification: *