Download Salesforce.Identity-and-Access-Management-Architect.VCEplus.2022-10-28.30q.tqb
| Vendor: | Salesforce |
| Exam Code: | Identity-and-Access-Management-Architect |
| Exam Name: | Salesforce Certified Identity and Access Management Architect |
| Date: | Oct 28, 2022 |
| File Size: | 126 KB |
Demo Questions
Question 1
Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization. Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?
- Redirect_uri
- State
- Scope
- Callback_uri
Correct answer: A
Question 2
Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community.
UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?
- User-Agent
- IDP-initiated
- Sp-Initiated
- Web server
Correct answer: B
Question 3
Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework?
Choose 2 Answers
- Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.
- Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
- Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
- Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
Correct answer: AC
