Identity-and-Access-Management-Designer Exam Dumps – Our Features

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).Which three OAuth concepts apply to this flow?Choose 3 answers

• Client ID
• Refresh Token
• Authorization Code
• Verification Code
• Scopes

Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and corporate identity store.What type of authentication flow is required to support deep linking'

• Web Server OAuth SSO flow
• Service-Provider-Initiated SSO
• Identity-Provider-initiated SSO
• StartURL on Identity Provider

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

• Create a custom application on Heroku that manages the sign-on process from Facebook.
• Use JIT Provisioning to automatically create the account in the accounting system.
• Add an Apex callout in the registration handler of the authorization provider.
• Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

• Ensure that users have the same email value in their user records in all of UC's salesforce orgs.
• Ensure the same username is allowed in multiple orgs by contacting salesforce support.
• Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
• Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.Which action will accomplish this?

• Use a HTTP POST to request the refresh token for the current user.
• Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.
• Use a HTTP POST to make a call to the revoke token endpoint.
• Enable Single Logout with a secure logout URL.

Universal containers (UC) has implemented SAML -based single Sign-on for their salesforce application. UC is using pingfederate as the Identity provider. To access salesforce, Users usually navigate to a bookmarked link to my domain URL. What type of single Sign-on is this?

• Sp-Initiated
• IDP-initiated with deep linking
• IDP-initiated
• Web server flow.

In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?

• RedirectURL
• RelayState
• DisplayState
• StartURL

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.Which three steps should an identity architect take to implement social sign-on?Choose 3 answers

• Register both Facebook and Linkedln as connected apps.
• Create authentication providers for both Facebook and Linkedln.
• Check 'Facebook' and 'Linkedln' under Login Page Setup.
• Enable 'Federated Single Sign-On Using SAML'.
• Update the default registration handlers to create and update users.

Universal Containers built a custom mobile app for their field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a 'logout' feature.What should the logout function perform in this scenario, where user sessions are refreshed automatically?

• Invoke the revocation URL and pass the refresh token.
• Clear out the client Id to stop auto session refresh.
• Invoke the revocation URL and pass the access token.
• Clear out all the tokens to stop auto session refresh.

Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.What should an identity architect do to fulfill this requirement?

• Contact Salesforce Support and enable delegate single sign-on.
• Create a custom external authentication provider.
• Use certificate-based authentication.
• Configure OpenID Connect authentication provider.