ExamTopics Logo
Mail Us[email protected]
Menu
Salesforce Discussions
exam questions

Exam Certified Integration Architect All Questions

View all questions & answers for the Certified Integration Architect exam
Go to Exam

Exam Certified Integration Architect topic 1 question 2 discussion

Actual exam question from Salesforce's Certified Integration Architect
Question #: 2
Topic #: 1
[All Certified Integration Architect Questions]

A subscription-based media company’s system landscape forces many subscribers to maintain multiple accounts and to login more than once. An Identity and Access Management (IAM) system, which supports SAML and OpenId, was recently implemented to improve the subscriber experience through self-registration and single sign-on (SSO).
The IAM system must integrate with Salesforce to give new self-service customers instant access to Salesforce Community Cloud.
Which two requirements should the Salesforce Community Cloud support for self-registration and SSO? (Choose two.)

  • A. SAML SSO and Just-in-Time (JIT) provisioning
  • B. OpenId Connect Authentication Provider and Registration Handler
  • C. OpenId Connect Authentication Provider and JIT provisioning
  • D. SAML SSO and Registration Handler
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by n0mae at March 5, 2023, 4:13 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Tester9998
3 days, 6 hours ago
Selected Answer: AB
Agree with jfouriex
upvoted 1 times
...
opsdev3092
11 months ago
Adding to jfouriex's answer that supports B : https://developer.salesforce.com/docs/atlas.en-us.mobile_sdk.meta/mobile_sdk/sso_provider_openid_connect.htm The article mentions that a Registration Handler is required as part of configuring SSO with OpenID Connect. This article is under the section "Using External Authentication with Experience Cloud Sites"
upvoted 1 times
...
jfouriex
11 months, 2 weeks ago
Selected Answer: AB
AB is the correct answer - https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/apex_auth_plugin.htm and https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/apex_interface_Auth_SamlJitHandler.htm
upvoted 4 times
...
jfouriex
11 months, 2 weeks ago
AB is the correct answer - https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/apex_auth_plugin.htm and https://developer.salesforce.com/docs/atlas.en-us.apexref.meta/apexref/apex_interface_Auth_SamlJitHandler.htm
upvoted 1 times
...
hajareethwan
1 year ago
From my understanding, only SAML SSO allows for JIT provisioning so for users who can use SSO to login, JIT provisioning can take place. Otherwise, for OpenId Connect (OIDC) Authentication, that would require a registration handler that would create a user for you in the Experience Cloud for you to login. That is not considered at JIT provisioning.
upvoted 2 times
...
JLee1
1 year, 1 month ago
Selected Answer: AC
it should be AC, the question says instant access so need Just In Time
upvoted 1 times
...
n0mae
1 year, 10 months ago
A, C Just-in-Time Provisioning for Experience Cloud With Just-in-Time (JIT) provisioning for Experience Cloud, you can use a SAML assertion to create Experience Cloud site users the first time they log in from an identity provider.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel