The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

• A. Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.
• B. Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
• C. OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
• D. Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

A farming enterprise offers smart farming technology to its farmer customers, which includes a variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store all the data in Salesforce. They would also like to ensure timely maintenance of the Installed sensors. They have engaged a salesforce Architect to propose an appropriate way to generate sensor Information In Salesforce.
Which OAuth flow should the architect recommend?

• A. OAuth 2.0 Device Authentication Row
• B. OAuth 2.0 SAML Bearer Assertion Flow
• C. OAuth 2.0 Asset Token Flow
• D. OAuth 2.0 JWT Bearer Token Flow

Universal containers(UC) has implemented SAML-BASED single Sign-on for their salesforce application and is planning to provide access to salesforce on mobile devices using the salesforce1 mobile app. UC wants to ensure that single Sign-on is used for accessing the salesforce1 mobile app. Which two recommendations should the architect make? Choose 2 answers

• A. Configure the embedded Web browser to use my domain URL.
• B. Configure the salesforce1 app to use the my domain URL
• C. Use the existing SAML SSO flow along with Web server flow
• D. Use the existing SAML SSO flow along with user agent flow.

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

• A. Update the default registration handlers to create and update users.
• B. Check "Facebook" and "Linkedln" under Login Page Setup.
• C. Create authentication providers for both Facebook and Linkedln.
• D. Register both Facebook and Linkedln as connected apps.
• E. Enable "Federated Single Sign-On Using SAML".

A real estate company wants to provide its customers a digital space to design their interior decoration options. To simplify the registration to gain access to the community site (built in Experience Cloud), the CTO has requested that the IT/Development team provide the option for customers to use their existing social-media credentials to register and access.
The IT lead has approached the Salesforce Identity and Access Management (IAM) architect for technical direction on implementing the social sign-on (for Facebook, Twitter, and a new provider that supports standard OpenID Connect (OIDC)).
Which two recommendations should the Salesforce IAM architect make to the IT Lead?
Choose 2 answers

• A. Use declarative registration handler process builder/flow to create, update users and contacts.
• B. For supporting OIDC it is necessary to enable Security Assertion Markup Language (SAML) with Just-in-Time provisioning (JIT) and OAuth 2.0.
• C. Authentication provider configuration is required each social sign-on providers; and enable Authentication providers in
• D. Apex coding skills are needed for registration handler to create and update users.