DOWNLOAD the newest Actual4Exams Identity-and-Access-Management-Architect PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1jfbuTw5cnJHYcWknA5FM5167qcH-A0-T
We would like to make it clear that learning knowledge and striving for certificates of Identity-and-Access-Management-Architect exam is a self-improvement process, and you will realize yourself rather than offering benefits for anyone. So our Identity-and-Access-Management-Architect training guide is once a lifetime opportunity you cannot miss. With all advantageous features introduced on the website, you can get the first expression that our Identity-and-Access-Management-Architect Practice Questions are the best.
| Section | Objectives |
|---|---|
| Topic 1: Single Sign-On (SSO) | - Given a scenario, recommend the appropriate SSO strategy
|
| Topic 2: Identity Management | - Describe the role(s) Identity Management plays in the enterprise
|
| Topic 3: Access Management | - Given a scenario, describe how to configure access management
|
| Topic 4: Directory Services | - Given a scenario, recommend the appropriate directory service solution
|
>> Study Identity-and-Access-Management-Architect Demo <<
The Salesforce Certified Identity and Access Management Architect web-based practice exam has all the features of the desktop software, but it requires an active internet connection. If you are busy in your daily routine and cant manage a proper time to sit and prepare for the Identity-and-Access-Management-Architect certification test, our Salesforce Certified Identity and Access Management Architect Identity-and-Access-Management-Architect PDF Questions file is ideal for you. You can open and use the Identity-and-Access-Management-Architect Questions from any location at any time on your smartphones, tablets, and laptops. Questions in the Salesforce Certified Identity and Access Management Architect Identity-and-Access-Management-Architect PDF document are updated, and real.
NEW QUESTION # 107
Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the apocopate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement?
Choose 3 answers
Answer: B,C,D
Explanation:
Explanation
User provisioning is a feature that allows Salesforce to create, update, or deactivate user accounts on a third-party system, such as Concur, based on user assignments in Salesforce1. To implement user provisioning for Concur with an approval process, the identity architect should use the following steps2:
Create a connected app for Concur in Salesforce. A connected app is an application that integrates with Salesforce using APIs and standard protocols, such as SAML, OAuth, and OpenID Connect3. To create a connected app for Concur, you need to provide the basic information, such as the app name, logo URL, contact email, and API name. You also need to enable SAML and configure the SAML settings, such as the entity ID, ACS URL, and subject type4.
Enable User Provisioning for the connected app. This step allows you to configure the user provisioning settings for the connected app, such as the provisioning API endpoint URL, the client ID and client secret, the mapping of user attributes, and the linkage rules5. You can also choose to require an approval process for user provisioning requests by selecting the Approval Required option6.
Create an approval process for UserProvisioningRequest object associated with the provisioning flow. A UserProvisioningRequest object represents a user provisioning request that is sent to or received from a third-party system7. An approval process specifies the steps necessary for a record to be approved and who must approve it at each step8. To create an approval process for UserProvisioningRequest object, you need to define the approval steps, assignees, actions, criteria, and email alerts9.
References:
User Provisioning for Connected Apps
Tutorial: Configure Salesforce for automatic user provisioning
Connected Apps
Create a Connected App
Enable User Provisioning for a Connected App
Require Approvals for User Provisioning Requests
UserProvisioningRequest
Approval Processes
Create an Approval Process
NEW QUESTION # 108
Universal Containers (UC) has implemented SSO according to the diagram below. uses SAML while Salesforce Org 1 uses OAuth 2.0. Users usually start their day by first attempting to log into Salesforce Org 2 and then later in the day, they will log into either the Financial System or CPQ system depending upon their job position. Which two systems are acting as Identity Providers?
Answer: B,C
Explanation:
Explanation
These are the systems that are acting as identity providers (IdPs) in the SSO scenario. An IdP is a trusted provider that enables a customer to use single sign-on (SSO) to access other websites5. In this case, Pingfederate and Salesforce Org 1 are the IdPs that authenticate the users and issue SAML assertions or OAuth tokens to the service providers (SPs). The SPs are the websites that host apps and rely on the IdPs for authentication5. In this case, Salesforce Org 2, Financial System, and CPQ System are the SPs that receive the SAML assertions or OAuth tokens from the IdPs and grant access to the users.
Option A is incorrect because Financial System is not an IdP, but an SP. It does not authenticate the users, but receives SAML assertions from Pingfederate. Option C is incorrect because Salesforce Org 2 is not an IdP, but an SP. It does not authenticate the users, but receives OAuth tokens from Salesforce Org 1.
References: 5: Identity Providers and Service Providers - Salesforce 6: Salesforce as Service Provider and Identity Provider for SSO
NEW QUESTION # 109
A farming enterprise offers smart farming technology to its farmer customers, which includes a variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store all the data in Salesforce. They would also like to ensure timely maintenance of the Installed sensors. They have engaged a salesforce Architect to propose an appropriate way to generate sensor Information In Salesforce.
Which OAuth flow should the architect recommend?
Answer: B
Explanation:
Explanation
To generate sensor information in Salesforce, the architect should recommend OAuth 2.0 Asset Token Flow.
OAuth 2.0 Asset Token Flow is a protocol that allows devices, such as sensors, to obtain an access token from Salesforce by using a certificate instead of an authorization code. The access token can be used to access Salesforce APIs and send data to Salesforce. OAuth 2.0 Asset Token Flow is designed for devices that do not have a user interface or a web browser. References: OAuth 2.0 Asset Token Flow, Authorize Apps with OAuth
NEW QUESTION # 110
Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory ActProtocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO's Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?
Answer: B
Explanation:
Login History allows administrators to view the login attempts of all users in the org, including the status, source IP, login type, and application. This can help identify and troubleshoot any login errors or issues.
References: Login History
NEW QUESTION # 111
Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers
Answer: A,C
Explanation:
To ensure that SSO is usedfor accessing the Salesforce1 mobile app, UC should configure the Salesforce1 app to use the My Domain URL instead of the default login.salesforce.com URL. My Domain is a feature that allows UC to create a custom domain name for their Salesforce org that supports SSO with their identity provider. UC should also use the existing SAML-SSO flow along with User Agent Flow, which is an OAuth
2.0 flow that allows users to authenticate with their identity provider through an embedded browser within the mobile app.Verified References: [Configure SSO with Salesforce as a SAML Service Provider], [User-Agent Flow]
NEW QUESTION # 112
......
Usually, the questions of the real exam are almost the same with our Identity-and-Access-Management-Architect exam questions. So you just need to memorize our correct questions and answers of the Identity-and-Access-Management-Architect study materials. You absolutely can pass the exam. Also, we will offer good service to add you choose the most suitable Identity-and-Access-Management-Architect Practice Braindumps since we have three different versions of every exam product. And you can free download the demos of the Identity-and-Access-Management-Architect learning quiz.
Reliable Identity-and-Access-Management-Architect Exam Questions: https://www.actual4exams.com/Identity-and-Access-Management-Architect-valid-dump.html
P.S. Free & New Identity-and-Access-Management-Architect dumps are available on Google Drive shared by Actual4Exams: https://drive.google.com/open?id=1jfbuTw5cnJHYcWknA5FM5167qcH-A0-T