最新のPlat-Arch-203問題集で試験を準備する

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

• A. Register partners in one org and access information from other orgs using APIs.
• B. Consolidate Partner related information in a single org and provide access through Salesforce community.
• C. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.
• D. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

• A. Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
• B. Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
• C. Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.
• D. Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

• A. SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.
• B. Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
• C. Just-in-Time (JIT) for both Provisioning and Deprovisioning.
• D. Provisioning API for both Provisioning and Deprovisioning.

Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.
Which two mechanisms are used to provision agents with the appropriate permissions?
Choose 2 answers

• A. Use SAML Just-m-Time (JIT) Handler class run as current user to update role and permission sets.
• B. Use Login Flow in System Context to update role and permission sets.
• C. Use SAML Just-in-Time (JIT) handler class run as an admin user to update role and permission sets.
• D. Use Login Flow in User Context to update role and permission sets.

The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

• A. Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
• B. Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.
• C. OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
• D. Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.