Salesforce Plat-Arch-203 Exam : Salesforce Certified Platform Identity and Access Management Architect

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

• A. Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.
• B. Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-
• C. Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.
• D. Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

• A. Create a custom application on Heroku that manages the sign-on process from Facebook.
• B. Add an Apex callout in the registration handler of the authorization provider.
• C. Use JIT Provisioning to automatically create the account in the accounting system.
• D. Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and Customer Community licenses in all orgs.
Customers of UC use Community to track orders and create inquiries. Customers also tend to move across regions frequently.
What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

• A. Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.
• B. Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.
• C. Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.
• D. Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

Northern Trail Outfitters (NTO) is planning to implement a community for its customers using Salesforce Experience Cloud . Customers are not able to self-register. NTO would like to have customers set their own passwords when provided access to the community.
Which two recommendations should an identity architect make to fulfill this requirement?
Choose 2 answers

• A. Use Login Flows to allow users to reset password in Experience Cloud site.
• B. Allow Password reset using the API to update Experience Cloud site membership.
• C. Add customers as contacts and add them to Experience Cloud site.
• D. Enable Welcome emails while configuring the Experience Cloud site.

IT security at Unversal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

• A. Use the Salesforce Authenticator mobile app with two-step verification
• B. Increase Password complexity requirements in Salesforce.
• C. Lock sessions to the IP address from which they originated.
• D. Implement Single Sign-on using a corporate Identity store.