Exam Certified Identity and Access Management Designer topic 1 question 16 discussion

Actual exam question from Salesforce's Certified Identity and Access Management Designer

Question #: 16
Topic #: 1

[All Certified Identity and Access Management Designer Questions]

Universal Containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users.
Which three items should UC take into consideration when building the web service to handle the Delegated Authentication request? (Choose three.)

A. The web service can be written using either the SOAP or REST protocol.
B. UC should whitelist all Salesforce IP ranges on their corporate firewall.
C. The web service needs to include SourcelP as a method parameter.
D. The return type of the web service method should be a boolean value.
E. Delegated Authentication is enabled for the System Administrator profile.

Show Suggested Answer

Suggested Answer: ACD 🗳️

by ahdamnius at May 22, 2023, 4:05 p.m.

Comments

Submit Cancel

SS1121

8 months, 3 weeks ago

Selected Answer: ACD

https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication.htm&type=5 A: You can use any authentication method as long as you wrap it in a web service that Salesforce can consume C: The web service call passes the username, password, and source IP to your SSO web service implementation, which Salesforce servers then access. The source IP is the address where the login request originated. D: Your SSO web service implementation validates the passed information and returns either true or false.

upvoted 2 times

...

raajNick

1 year, 9 months ago

Confusing to see votes distributed. Anyone has good references to these options?

upvoted 2 times

...

chrisx01

1 year, 10 months ago

c : https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication.htm&type=5

upvoted 1 times

raajNick

1 year, 9 months ago

From this link. It looks like A and E are not options

upvoted 2 times

...

Volovitch

1 year, 10 months ago

Selected Answer: ACD

Correction ACD : A, yes not only SOAP B, not all IP needs to be whitelisted C, yes needed. said in the doc D, yes E, no : should avoid indirect connection for system admin

upvoted 1 times

...

Volovitch

1 year, 10 months ago

Selected Answer: BDE

SourceID is not used as a method parameter https://help.salesforce.com/s/articleView?id=000382656&type=1

upvoted 1 times

...

Volovitch

1 year, 10 months ago

A no, only SOAP (?) B yes, need to saveguard the link C no, what is it ? D yes, returns boolean E yes, handle with profil or permission https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication_configuring.htm&type=5

upvoted 1 times

...

ahdamnius

2 years ago

Selected Answer: ACD

Given that the method leverages a web service - opening SF IP addresses should not be necessary (b). Delegated Administration is enabled for all leveraging SSO - not just System Administrators (d). This consideration is not specified in the question.

upvoted 2 times

...