Certified Identity and Access Management Designer Delegated Practice Questions

Universal containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users. Which three items should UC take into consideration while building the Web service to handle the Delegated Authentication request? Choose 3 answers

Select 3 answers.

• AA. The web service needs to include Source IP as a method parameter.
• BB. UC should whitelist all salesforce ip ranges on their corporate firewall.
• CC. The web service can be written using either the soap or rest protocol.
• DD. Delegated Authentication is enabled for the system administrator profile.
• EE. The return type of the Web service method should be a Boolean value

Sales users at Universal containers use salesforce for Opportunity management. Marketing uses a third-party application called Nest for Lead nurturing that is accessed using username/password. The VP of sales wants to open up access to nest for all sales uses to provide them access to lead history and would like SSO for better adoption. Salesforce is already setup for SSO and uses Delegated Authentication. Nest can accept username/Password or SAML-based Authentication. IT teams have received multiple password-related issues for nest and have decided to set up SSO access for Nest for Marketing users as well. The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose. Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication? Choose 2 answers

Select 2 answers.

• AA. Salesforce license for sales users and Identity license for Marketing users
• BB. Salesforce license for sales users and External Identity license for Marketing users
• CC. Identity license for sales users and Identity connect license for Marketing users
• DD. Salesforce license for sales users and platform license for Marketing users.