Universal Container's (UC) identity architect needs to recommend a license type for their new Experience Cloud site that will be used by external partners (delivery providers) for reviewing and updating their accounts, downloading files provided by UC and obtaining scheduled pickup dates from their calendar.
UC is using their Salesforce production org as the identity provider for these users and the expected number of individual users is 2.5 million with 13.5 million unique logins per month.
Which of the following license types should be used to meet the requirement?

• A.External Apps License
• B.Partner Community Login License
• C.Customer Community plus Login License
• D.Partner Community License

Comment: *

Name: *

Email: *

Verification: *

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

• A.Reference to the login address URL of the service provider.
• B.Reference to the login address URL of the identity Provider.
• C.Reference to a URL redirect parameter at the identity provider.
• D.Reference to a URL redirect parameter at the service provider.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has a mobile application that it wants to deploy to all of its salesforce users, including customer Community users. UC would like to minimize the administration overhead, which two items should an architect recommend? Choose 2 answers

• A.Enable the "High Assurance session required" setting in the Connected App.
• B.Enable the "Enforce Ip restrictions" settings in the connected App.
• C.Enable the "Refresh Tokens is valid until revoked " setting in the Connected App.
• D.Enable the "All users may self-authorize" setting in the Connected App.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

• A.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
• B.Build an integration that queries LDAP periodically and creates new active users in Salesforce.
• C.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.
• D.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at

Comment: *

Name: *

Email: *

Verification: *

Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.
How should an identity architect configure AWS to authenticate and authorize Salesforce users?

• A.Develop a custom Auth server in AWS.
• B.Create a custom external authentication provider.
• C.Configure AWS as an OpenID Connect Provider.
• D.Configure the custom employee app as a connected app.

Comment: *

Name: *

Email: *

Verification: *