Identity-and-Access-Management-Designer Free Practice Test

Universal Containers wants to implement SAML SSO for their internal Salesforce users using a third-party IdP. After some evaluation, UC decides not to set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

1. A. SP-initiated SSO will not work.
2. B. Neither SP- nor IdP-initiated SSO will work.
3. C. Either SP- or IdP-initiated SSO will work.
4. D. IdP-initiated SSO will not work.

Correct Answer: B

Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employee usernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO) solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.
NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning and deprovisiorung of users in Salesforce.
What role does identity Connect play in the outlined requirements?

1. A. Service Provider
2. B. Single Sign-On
3. C. Identity Provider
4. D. User Management

Correct Answer: D

Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from a custom web page that UC magnets. UC wants its users to use the same set of credentials to access each of the applications. what SAML SSO flow should an Architect recommend for UC?

1. A. SP-Initiated with Deep Linking
2. B. SP-Initiated
3. C. IdP-Initiated
4. D. User-Agent

Correct Answer: C

Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

1. A. Use the salesforce REST API to sync users from active directory to salesforce
2. B. Use an app exchange product to sync users from Active Directory to salesforce.
3. C. Use Active Directory Federation Services to sync users from active directory to salesforce.
4. D. Use Identity connect to sync users from Active Directory to salesforce

Correct Answer: BD

Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

1. A. The "Redirect to Identity Provider" option has been selected in the my domain configuration.
2. B. The user has not configured the salesforce1 mobile app to use my domain for login
3. C. The "Redirect to identity provider" option has not been selected the SAML configuration.
4. D. The user has not been granted the "Enable single Sign-on" permission

Correct Answer: B