Identity and Access Management Designer sample questions

Question 1

### Case Study: Global Finance Inc. Identity Modernization

**Company Background:**
Global Finance Inc. (GFI) is a multinational financial services company. Their primary Salesforce org serves as the central hub for customer relationship management. They are developing a new suite of applications to be used by internal employees, external financial partners, and retail customers. The primary Salesforce org must act as the central Identity Provider (IdP) for this new ecosystem.

**Application Ecosystem:**
1. **Internal Analytics Dashboard:** A confidential web application hosted on-premise that requires server-to-server API access to pull Salesforce data. The app must act on behalf of the logged-in user to respect sharing rules.
2. **Partner Portal:** A separate Salesforce Experience Cloud org for financial partners. Partners should log in to the primary GFI org and then access the Partner Portal seamlessly.
3. **Mobile Client App:** A native iOS/Android application for retail customers that will use the primary GFI org for authentication and API access. The app must securely handle sessions on the mobile device.

**Requirements & Constraints:**
* The primary GFI org must be the single source of truth for identity.
* Server-to-server communication must not involve storing user passwords.
* Partner access must be seamless after initial login (SSO).
* The mobile app must provide a secure and long-lived session without requiring frequent logins.

Which combination of identity protocols and flows represents the most secure and appropriate architectural solution for this ecosystem?
```mermaid
graph TD
subgraph Primary_Org [Primary Salesforce Org (IdP)]
direction LR
Users((Users))
end

subgraph Applications
A[Internal Analytics Dashboard]
B[Partner Portal (Experience Cloud)]
C[Mobile Client App]
end

Users --> Primary_Org
Primary_Org --> A
Primary_Org --> B
Primary_Org --> C
```

Accepted Answer

1) Analytics Dashboard: OAuth 2.0 JWT Bearer Flow. 2) Partner Portal: SAML 2.0 SSO. 3) Mobile App: OAuth 2.0 User-Agent Flow with Refresh Token.

Answer

1) Analytics Dashboard: OAuth 2.0 Username-Password Flow. 2) Partner Portal: Delegated Authentication. 3) Mobile App: OAuth 2.0 User-Agent Flow.

Answer

1) Analytics Dashboard: SAML Assertion Flow. 2) Partner Portal: Cross-Org Adapter for Salesforce Connect. 3) Mobile App: OAuth 2.0 Web Server Flow.

Answer

1) Analytics Dashboard: OAuth 2.0 Client Credentials Flow. 2) Partner Portal: OpenID Connect. 3) Mobile App: SAML 2.0 SSO.

Question 2

Universal Containers (UC) has decided to build a new, highly sensitive application on the Lightning platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/password to authenticate to this application.How can an Architect support fingerprints as a form of identification for Salesforce authentication?

Accepted Answer

Use an AppExchange product that does fingerprint scanning with native Salesforce Identity Confirmation.

Answer

Use Custom Login Flows with callouts to a third-party fingerprint scanning application.

Answer

Use Salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.

Answer

Use Delegated Authentication with callouts to a third-party fingerprint scanning application.

Free Identity and Access Management Designer sample questions

2 more free samples are waiting