Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have bee purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

• A.Set jp an external login page and call Salesforce APIs for user creation.
• B.Customize me self-registration Apex handler to create only the user record.
• C.Enable "Allow customers and partners to self-register".
• D.Customize the self-registration Apex handler to temporarily associate the user to a shared single contact record.
• E.Select the "Configurable Self-Reg Page" option under Login & Registration.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don't exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?

• A.Use Identity Connect to sync users.
• B.Use Salesforce APIs to create users on the fly.
• C.Use On-the-Fly provisioning.
• D.Use Just-in-Time provisioning.

Comment: *

Name: *

Email: *

Verification: *

The security team at Universal Containers (UC) has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so. For all other users of Salesforce, users should be allowed to use AD Credentials or Salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

• A.Use SAML federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.
• B.Use SAML federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports Permission.
• C.Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically and or remove a permission set that grants the Export Reports Permission.
• D.Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.

Comment: *

Name: *

Email: *

Verification: *

A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: "Failed: Not approved for access." What is the probable cause of this issue?

• A.The users do NOT have the correct permission set assigned to them.
• B.The Salesforce Administrators have revoked the OAuth authorization.
• C.The use of High Assurance sessions are required for the Connected App.
• D.The Connected App setting "All users may self-authorize" is enabled.

Comment: *

Name: *

Email: *

Verification: *

Ttie executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

• A.OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
• B.Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.
• C.Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
• D.Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

Comment: *

Name: *

Email: *

Verification: *