In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?

• A.DisplayState
• B.RedirectURL
• C.StartURL
• D.RelayState

Comment: *

Name: *

Email: *

Verification: *

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

• A.Query using OpenID Connect discovery endpoint.
• B.A Leverage OpenID Connect Token Introspection.
• C.Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.
• D.Create a custom OAuth scope.

Comment: *

Name: *

Email: *

Verification: *

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company*s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers

• A.Build custom pages for branding requirements in Experience Cloud.
• B.Login & Registration pages can be branded in the Community Administration settings.
• C.Build custom site pages for reset and forgot password features.
• D.Use Experience Builder to build branded Reset and Forgot Password pages.

Comment: *

Name: *

Email: *

Verification: *

Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce?
Choose 2 answers

• A.Once SSO is enabled, users are only able to login using Salesforce credentials.
• B.Request Salesforce Support to enable delegated authentication.
• C.Enable My Domain and select "Prevent login from https://login.salesforce.com".
• D.Assign user "is Single Sign-on Enabled" permission via profile or permission set.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

• A.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• B.Remove existing restrictions on ip ranges for all types of user access.
• C.Use login flow to bypass ip range restriction for the mobile app.
• D.Relax the ip restriction in the connect app settings for the salesforce1 mobile app

Comment: *

Name: *

Email: *

Verification: *