Instant Access Salesforce Plat-Arch-203 Exam Premium Dumps - FreeCram

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

• A. Either SP- or IdP-initiated SSO will work.
• B. SP-initiated SSO will NOT work
• C. Neither SP- nor IdP-initiated SSO will work.
• D. IdP-initiated SSO will NOT work.

The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

• A. Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.
• B. Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
• C. Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
• D. Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

• A. Register both Facebook and Linkedln as connected apps.
• B. Check "Facebook" and "Linkedln" under Login Page Setup.
• C. Create authentication providers for both Facebook and Linkedln.
• D. Update the default registration handlers to create and update users.
• E. Enable "Federated Single Sign-On Using SAML".

Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.
What should a identity architect recommend to create partners?

• A. Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.
• B. Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.
• C. On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.
• D. Allow partners to register through the IdP and create partner users in Salesforce through an API.