Salesforce Identity and Access Management Designer Dumps

Identity and Access Management Designer
Free Dumps
Salesforce Certified Identity and

Access Management Designer (SU21)
https://www.passcert.com/Identity-and-Access-Management-Designer.html
1. Universal Containers (UC) would like to enable self-registration for their
Salesforce Partner Community Users. UC wants to capture some custom data
elements from the partner user, and based on these data elements, wants to
assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC? Choose 2 answers
A. Configure Registration for Communities to use a custom Visualforce Page.
B. Modify the SelfRegistration trigger to assign Profile and Account.
C. Modify the CommunitiesSelfRegController to assign the Profile and Account.
D. Configure Registration for Communities to use a custom Apex Controller.
Answer: A,C
Download Passcert Latest & Valid Identity and Access Management Designer Free Dumps To Ensure Your Success
2. Universal containers (UC) would like to enable SAML-BASED SSO
for a salesforce partner community. UC has an existing ldap identity
store and a third-party portal. They would like to use the existing
portal as the primary site these users access, but also want to allow
seamless access to the partner community.
What SSO flow should an architect recommend?
A. User-Agent
B. IDP-initiated
C. Sp-Initiated
D. Web server
Answer: B
3.Universal Containers (UC) uses Salesforce to allow customers to
keep track of the order status. The customers can log in to Salesforce
using external authentication providers, such as Facebook and Google.
UC is also leveraging the App Launcher to let customers access an of
platform application for generating shipping labels. The label generator
application uses OAuth to provide users access.
What license type should an Architect recommend for the customers?
A. Customer Community license
B. Identity license
C. Customer Community Plus license
D. External Identity license
Answer: B
4. A group of users try to access one of universal containers connected
apps and receive the following error message: "Failed: Not approved
for access".
What is most likely to cause of the issue?
A. The use of high assurance sections are required for the connected
App.
B. The users do not have the correct permission set assigned to them.
C. The connected App setting "All users may self-authorize" is enabled.
D. The salesforce administrators gave revoked the Oauth
authorization.
Answer: B
5. Universal Containers (UC) is building a customer community and will allow
customers to authenticate using Facebook credentials. The First time the user
authenticating using facebook, UC would like a customer account created
automatically in their Accounting system. The accounting system has a web
service accessible to Salesforce for the creation of accounts.
How can the Architect meet these requirements?
A. Create a custom application on Heroku that manages the sign-on process from
Facebook.
B. Use JIT Provisioning to automatically create the account in the accounting
system.
C. Add an Apex callout in the registration handler of the authorization provider.
D. Use OAuth JWT flow to pass the data from Salesforce to the Accounting
System.
Answer: C
6. A global company's Salesforce Identity Architect is reviewing its Salesforce
production org
login history and is seeing some intermittent Security Assertion Markup
Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors? Choose 2 answers
A. The subject element is missing from the assertion sent to salesforce.
B. The certificate loaded into SSO configuration does not match the certificate
used by the IdP.
C. The current time setting of the company's identity provider (IdP) and
Salesforce platform is out of sync by more than eight minutes.
D. The assertion sent to 5alesforce contains an assertion ID previously used.
Answer: A,D
7. Universal Containers (UC) built an integration for their employees to post,
view, and vote for ideas in Salesforce from an internal Company portal. When
ideas are posted in Salesforce, links to the ideas are created in the company
portal pages as part of the integration process. The Company portal connects to
Salesforce using OAuth. Everything is working fine, except when users click on
links to existing ideas, they are always taken to the Ideas home page rather than
the specific idea, after authorization.
Which OAuth URL parameter can be used to retain the original requested page
so that a user can be redirected correctly after OAuth authorization?
A. Redirect_uri
B. State
C. Scope
D. Callback_uri
Answer: A
8. Universal Containers is budding a web application that will
connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app
to support this requirement? Choose 2 answers
A. The Use Digital Signature option in the connected app.
B. The "web" OAuth scope in the connected app,
C. The "api" OAuth scope in the connected app.
D. The "edair_api" OAuth scope m the connected app.
Answer: A,C
9. Universal containers (UC) wants to implement a partner community. As part of
their implementation, UC would like to modify both the Forgot password and
change password experience with custom branding for their partner community
users.
Which 2 actions should an architect recommend to UC? Choose 2 answers
A. Build a community builder page for the change password experience and
Custom Visualforce page for the Forgot password experience.
B. Build a custom visual force page for both the change password and Forgot
password experiences.
C. Build a custom visual force page for the change password experience and a
community builder page for the Forgot password experience.
D. Build a community builder page for both the change password and Forgot
password experiences.
Answer: B,C
10. Universal Containers wants to implement SAML SSO for their
internal Salesforce users using a third-party IdP. After some
evaluation, UC decides not to set up My Domain for their Salesforce
org.
How does that decision impact their SSO implementation?
A. SP-initiated SSO will not work.
B. Neither SP- nor IdP-initiated SSO will work.
C. Either SP- or IdP-initiated SSO will work.
D. IdP-initiated SSO will not work.
Answer: B

Salesforce Identity and Access Management Designer Dumps

Uploaded by

Copyright:

Available Formats

Salesforce Identity and Access Management Designer Dumps

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Salesforce Identity and Access Management Designer Dumps

Uploaded by

Copyright:

Available Formats

What license type should an architect recommend for UC's customers who can log in using external authentication providers and access an off-platform application via the App Launcher?

What are the two actions that should be recommended to UC to capture custom data elements and assign Profile and Account values during self-registration?

Identity and Access Management Designer

Salesforce Certified Identity and

You might also like