Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow employees to post Ideas from the Employee portal. When users click on some of the links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with the relevant pages. What OAuth flow is best suited for this scenario?

• A.Web Server flow
• B.Web Application flow
• C.User-Agent flow
• D.SAML Bearer Assertion flow

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) wants users to authenticate into their salesforce org using credentials stored in a custom identity store. UC does not want to purchase or use a third-party Identity provider. Additionally, UC is extremely wary of social media and does not consider it to be trust worthy. Which two options should an architect recommend to UC? Choose 2 answers

• A.Use a professional social media such as LinkedIn as an Authentication provider
• B.Build a custom web page that uses the identity store and calls frontdoor.jsp
• C.Build a custom Web service that is supported by Delegated Authentication.
• D.Implement the Openid protocol and configure an Authentication provider

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has decided to replace the homegrown customer portal with Salesforce Experience Cloud. UC will continue to use its third-party single sign-on (SSO) solution that stores all of its customer and partner credentials.
The first time a customer logs in to the Experience Cloud site through SSO, a user record needs to be created automatically.
Which solution should an identity architect recommend in order to automatically provision users in Salesforce upon login?

• A.Custom login flow and Apex handler
• B.Custom middleware and web services
• C.Just-in-Time (JIT) provisioning
• D.Third-party AppExchange solution

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

• A.Identity Connect will only support Idp-initiated SAML flows in UC's current environment.
• B.Identity connect is not compatible with UC's current identity environment.
• C.Identity Connect will not support user provisioning in UC's current environment.
• D.Identity Connect will only support SP-initiated SAML flows in UC's current environment.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?

• A.Develop a scheduled job that calls out to Facebook on a nightly basis.
• B.Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
• C.Use the updateUser() method on the Registration Handler class.
• D.Use information in the Signed Request that is received from Facebook.

Comment: *

Name: *

Email: *

Verification: *