最も有効な Identity-and-Access-Management-Designer 試験参考書

Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization. Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?

• A. Redirect_uri
• B. Scope
• C. Callback_uri
• D. State

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration site using Salesforce Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated administration will be used in the Expenence Cloud site to allow the partners to administer their users' access.
How should a partner identity be provisioned in Salesforce for this solution?

• A. Create a contactless user.
• B. Create a person account.
• C. Create a user and a related contact.
• D. Create only a contact.

Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portal where customers can login using their Google account.
NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.
What should an Identity architect do to fulfill the requirement?

• A. Create an authentication provider for Social Login using Google and leverage standard registration handler.
• B. Implement a Just-in-Time handler class that has logic to create cases upon first login.
• C. Configure an authentication provider for Social Login using Google and a custom registration handler.
• D. Implement a login flow with a record create component for Case.

A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.
What should an identity architect recommend to configure the requirement with limited changes to the third-party app?

• A. Redirect users to the third-party app for registration.
• B. Use Salesforce identity with Security Assertion Markup Language (SAML) for provisioning users.
• C. Create Canvas app in Salesforce for third-party app to provision users.
• D. Use a connected app with user provisioning flow.

A real estate company wants to provide its customers a digital space to design their interior decoration options. To simplify the registration to gain access to the community site (built in Experience Cloud), the CTO has requested that the IT/Development team provide the option for customers to use their existing social-media credentials to register and access.
The IT lead has approached the Salesforce Identity and Access Management (IAM) architect for technical direction on implementing the social sign-on (for Facebook, Twitter, and a new provider that supports standard OpenID Connect (OIDC)).
Which two recommendations should the Salesforce IAM architect make to the IT Lead?
Choose 2 answers

• A. Authentication provider configuration is required each social sign-on providers; and enable Authentication providers in community.
• B. Apex coding skills are needed for registration handler to create and update users.
• C. Use declarative registration handler process builder/flow to create, update users and contacts.
• D. For supporting OIDC it is necessary to enable Security Assertion Markup Language (SAML) with Just-in-Time provisioning (JIT) and OAuth 2.0.