Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

• A. Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• B. Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
• C. Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
• D. Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

• A. Use the custom registration handler to link social identities to Salesforce identities.
• B. Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
• C. Redirect the user to a custom page that allows the user to select an existing social identity for login.
• D. Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.

A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure mfa?
Choose 3 answers

• A. Third-party single sign-on with Mobile Authenticator app
• B. username and password + SMS passcode
• C. Lightning Login
• D. Username and password + secunty key
• E. Certificate-based Authentication

Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Jav a. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers

• A. Delegated Authentication will continue to work with a.net service.
• B. Delegated Authentication will not work with a.net service.
• C. Delegated Authentication will continue to work with rest services.
• D. Delegated Authentication will not work with rest services.

Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.
What should an identity architect do to fulfill this requirement?

• A. Configure OpenID Connect authentication provider.
• B. Create a custom external authentication provider.
• C. Use certificate-based authentication.
• D. Contact Salesforce Support and enable delegate single sign-on.