A technology enterprise is planning to implement single sign-on login for users. When users log in to the Salesforce User object custom field, data should be populated for new and existing users.
Which two steps should an identity architect recommend?
Choose 2 answers

• A.Implement SesslonManagement Class.
• B.Create and update methods.
• C.Implement Auth.SamlJitHandler Interface.
• D.Implement RegistrationHandler Interface.

Comment: *

Name: *

Email: *

Verification: *

A real estate company wants to provide its customers a digital space to design their interior decoration options. To simplify the registration to gain access to the community site (built in Experience Cloud), the CTO has requested that the IT/Development team provide the option for customers to use their existing social-media credentials to register and access.
The IT lead has approached the Salesforce Identity and Access Management (IAM) architect for technical direction on implementing the social sign-on (for Facebook, Twitter, and a new provider that supports standard OpenID Connect (OIDC)).
Which two recommendations should the Salesforce IAM architect make to the IT Lead?
Choose 2 answers

• A.For supporting OIDC it is necessary to enable Security Assertion Markup Language (SAML) with Just-in-Time provisioning (JIT) and OAuth 2.0.
• B.Use declarative registration handler process builder/flow to create, update users and contacts.
• C.Apex coding skills are needed for registration handler to create and update users.
• D.Authentication provider configuration is required each social sign-on providers; and enable Authentication providers in community.

Comment: *

Name: *

Email: *

Verification: *

Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

• A.Login Report
• B.Login Inspector
• C.Login Forensics
• D.Login History

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which twooptimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

• A.Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• B.Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• C.Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
• D.Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.

Comment: *

Name: *

Email: *

Verification: *

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

• A.Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.
• B.Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-
• C.Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.
• D.Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

Comment: *

Name: *

Email: *

Verification: *