Free Salesforce Identity-and-Access-Management-Designer Exam Dumps Questions & Answers

Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

• A.  The Federation ID must is case sensitive
• B.  The Federation ID must be populated on the user record.
• C.  The Federation ID must be in the form of an email address.
• D.  The Federation ID must be a valid Salesforce Username

A technology enterprise is setting up an identity solution with an external vendors wellness application for its employees. The user attributes need to be returned to the wellness application in an ID token.
Which authentication mechanism should an identity architect recommend to meet the requirements?

• A.  User Agent Flow
• B.  Web Server Flow
• C.  JWT Bearer Token Flow
• D.  OpenID Connect

The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

• A.  OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
• B.  Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.
• C.  Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.
• D.  Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

• A.  Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• B.  Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
• C.  Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
• D.  Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

Universal Containers (UC) has decided to replace the homegrown customer portal with Salesforce Experience Cloud. UC will continue to use its third-party single sign-on (SSO) solution that stores all of its customer and partner credentials.
The first time a customer logs in to the Experience Cloud site through SSO, a user record needs to be created automatically.
Which solution should an identity architect recommend in order to automatically provision users in Salesforce upon login?

• A.  Custom middleware and web services
• B.  Just-in-Time (JIT) provisioning
• C.  Custom login flow and Apex handler
• D.  Third-party AppExchange solution