Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT dumps - 100% Pass Guarantee!

Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.

How should an identity architect configure AWS to authenticate and authorize Salesforce users?

A. Configure the custom employee app as a connected app.

B. Configure AWS as an OpenID Connect Provider.

C. Create a custom external authentication provider.

D. Develop a custom Auth server in AWS.

A financial enterprise is planning to set up a user authentication mechanism to login to the Salesforce system. Due to regulatory requirements, the CIO of the company wants user administration, including passwords and authentication requests, to be managed by an external system that is only accessible via a SOAP webservice.

Which authentication mechanism should an identity architect recommend to meet the requirements?

A. OAuth Web-Server Flow

B. Identity Connect

C. Delegated Authentication

D. Just-in-Time Provisioning

Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN.

Which two options should an identity architect recommend to meet the requirement?

Choose 2 answers

A. Active Directory Password Sync Plugin

B. Configure Cloud Provider Load Balancer

C. Salesforce Trigger and Field on Contact Object

D. Salesforce Identity Connect

Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

A. Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.

B. Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

C. Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

D. Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.

What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

A. Ensure that there is an HTTPS connection between IDP and SP.

B. Ensure that on the SSO settings page, the "Request Signing Certificate" field has a self- signed certificate.

C. Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

D. Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.