Certified Identity and Access Management Designer Universal Practice Questions

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site. Which two options should be utilized in creating an authentication provider? Choose 2 answers

Select 2 answers.

• AA. A custom registration handier can be set.
• BB. A custom error URL can be set.
• CC. The default login user can be set.
• DD. The default authentication provider certificate can be set.

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

Select 2 answers.

• AA. Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
• BB. Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• CC. Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• DD. Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Universal containers (UC) has decided to use identity connect as it's identity provider. UC uses active directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users. Which three actions can AD groups control through identity connect? Choose 3 answers

Select 3 answers.

• AA. Public Group Assignment
• BB. Granting report folder access
• CC. Role Assignment
• DD. Custom permission assignment
• EE. Permission sets assignment