Which two capabilities does My Domain enable in the context of a SAML SSO configuration? Choose 2 answers

• A.Resource deep linking
• B.SSO from Salesforce Mobile App
• C.Login Forensics
• D.App Launcher

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

• A.Enforce mutual authentication between systems using SSL.
• B.Set up a proxy service for the login service in the DMZ.
• C.Include Client Id and Client Secret in the login header callout.
• D.Require the use of Salesforce security tokens on passwords.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

• A.Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
• B.Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.
• C.Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
• D.Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

• A.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.
• B.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.
• C.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
• D.Build an integration that queries LDAP periodically and creates new active users in Salesforce.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA.
UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs.
Which two Salesforce license types does UC need for its employees'
Choose 2 answers

• A.Salesforce and Identity Connect licenses
• B.Chatter Only and Identity licenses
• C.Company Community and Identity licenses
• D.Identity and Identity Connect licenses

Comment: *

Name: *

Email: *

Verification: *