Free Access Salesforce.Identity-and-Access-Management-Architect.v2024-03-01.q145 Practice Test (Page 23)

Question 106

Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the apocopate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement?
Choose 3 answers

A.Create an approval process for a custom object associated with the provisioning flow.

B.Create a connected app for Concur in Salesforce.

C.Enable User Provisioning for the connected app.

D.Create an approval process for user object associated with the provisioning flow.

E.Create an approval process for UserProvisionlngRequest object associated with the provisioning flow.

Correct Answer: B,C,E

Explanation
User provisioning is a feature that allows Salesforce to create, update, or deactivate user accounts on a third-party system, such as Concur, based on user assignments in Salesforce1. To implement user provisioning for Concur with an approval process, the identity architect should use the following steps2:
Create a connected app for Concur in Salesforce. A connected app is an application that integrates with Salesforce using APIs and standard protocols, such as SAML, OAuth, and OpenID Connect3. To create a connected app for Concur, you need to provide the basic information, such as the app name, logo URL, contact email, and API name. You also need to enable SAML and configure the SAML settings, such as the entity ID, ACS URL, and subject type4.
Enable User Provisioning for the connected app. This step allows you to configure the user provisioning settings for the connected app, such as the provisioning API endpoint URL, the client ID and client secret, the mapping of user attributes, and the linkage rules5. You can also choose to require an approval process for user provisioning requests by selecting the Approval Required option6.
Create an approval process for UserProvisioningRequest object associated with the provisioning flow. A UserProvisioningRequest object represents a user provisioning request that is sent to or received from a third-party system7. An approval process specifies the steps necessary for a record to be approved and who must approve it at each step8. To create an approval process for UserProvisioningRequest object, you need to define the approval steps, assignees, actions, criteria, and email alerts9.
References:
User Provisioning for Connected Apps
Tutorial: Configure Salesforce for automatic user provisioning
Connected Apps
Create a Connected App
Enable User Provisioning for a Connected App
Require Approvals for User Provisioning Requests
UserProvisioningRequest
Approval Processes
Create an Approval Process

Question 107

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

A.Use a Salesforce Login Flow to call out to a web service and create the user on the fly.

B.Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

C.Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.

D.Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Question 108

When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

A.The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.

B.Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.

C.Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.

D.The Audience ID, which can be set in a shared cookie.

Question 109

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership. What would be the optimal way to implement SSO?

A.Use Active Directory Federation Service (ADFS) as the Identity Provider.

B.Use Active Directory with Reverse Proxy as the Identity Provider.

C.Use Microsoft Access control Service as the Authentication provider.

D.Use Salesforce Identity Connect as the Identity Provider.

Question 110

Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Java. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers

A.Delegated Authentication will continue to work with rest services.

B.Delegated Authentication will not work with a.net service.

C.Delegated Authentication will continue to work with a.net service.

D.Delegated Authentication will not work with rest services.

Premium Bundle

Newest Identity-and-Access-Management-Architect Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Identity-and-Access-Management-Architect Exam! BraindumpsPass.com now offer the updated Identity-and-Access-Management-Architect exam dumps, the BraindumpsPass.com Identity-and-Access-Management-Architect exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Identity-and-Access-Management-Architect pdf dumps with Exam Engine here:

Access Identity-and-Access-Management-Architect Premium Version

(112 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 4059Salesforce.Identity-and-Access-Management-Architect.v2023-02-25.q77

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483