A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

• A.Use the custom registration handler to link social identities to Salesforce identities.
• B.Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
• C.Redirect the user to a custom page that allows the user to select an existing social identity for login.
• D.Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

• A.Build an integration that queries LDAP periodically and creates new active users in Salesforce.
• B.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.
• C.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.
• D.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) would like to enable SAML based SSO for a Salesforce Partner Community. UC has an existing LDAP identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an Architect recommend?

• A.Web Server.
• B.User- Agent.
• C.Idp-Initiated.
• D.SP-Initiated.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization. Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?

• A.State
• B.Scope
• C.Callback_uri
• D.Redirect_uri

Comment: *

Name: *

Email: *

Verification: *

Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google Apps from within salesforce through App launcher and connected App set up? Choose 2 answers

• A.Salesforce is the identity provider
• B.Salesforce is the service provider
• C.Google is the service provider
• D.Google is the identity provider

Comment: *

Name: *

Email: *

Verification: *