A company is deciding between using SAML and OpenID Connect for SSO to Salesforce. They have a requirement to support both web and mobile applications. The architect must choose a protocol that provides the best user experience and security. Which protocol should the architect recommend?

Use a custom authentication protocol that is proprietary to the company.

Use OpenID Connect for both web and mobile, as it is more modern and supports both.

Use SAML for both web and mobile, as it is the industry standard.

Use SAML for web and OpenID Connect for mobile, as each is best suited for its platform.

In a CIAM solution, what is the purpose of consent management?

To enforce password complexity requirements

To allow customers to control how their personal data is used and shared

To provide single sign-on across multiple applications

To synchronize customer data with the HR system

Which open standard is commonly used for single sign-on (SSO) in enterprise environments and relies on XML-based assertions to pass identity information between an identity provider and a service provider?

Lightweight Directory Access Protocol (LDAP)

Security Assertion Markup Language (SAML)

A company wants to allow its customers to log in to a Salesforce Community using their existing Google accounts. The architect must ensure that the customer's email address and name are available in Salesforce for personalization. Which federation approach should be used?

Create a custom login page that uses Google's REST API to fetch user data after login.

Use OAuth 2.0 with Google to get an access token, but do not request profile information.

Use OpenID Connect with Google as the identity provider and map the email and name claims to Salesforce fields.

Set up SAML-based federation with Google as the identity provider.

SalesforceCertified Technical Architect

Domain 2Objective 6

Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 7)

Part of the SECURITY domain, which makes up ~22% of our current practice bank.

34questions here

7free pages

9concepts

Questions 31–34

31expert · hard
A company is deciding between using SAML and OpenID Connect for SSO to Salesforce. They have a requirement to support both web and mobile applications. The architect must choose a protocol that provides the best user experience and security. Which protocol should the architect recommend?
Select an answer first
32foundation · easy
In a CIAM solution, what is the purpose of consent management?
Select an answer first
33foundation · easy
Which open standard is commonly used for single sign-on (SSO) in enterprise environments and relies on XML-based assertions to pass identity information between an identity provider and a service provider?
Select an answer first
34application · medium
A company wants to allow its customers to log in to a Salesforce Community using their existing Google accounts. The architect must ensure that the customer's email address and name are available in Salesforce for personalization. Which federation approach should be used?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to TECHNICAL-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “TECHNICAL-ARCHITECT” is a trademark of its owner, used for identification only.