Confidently Practice Online with Free Plat-Arch-203 Exam Cram

Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud. NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions. Which three Salesforce permissions are available to map to AD permissions? Choose 3 answers

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration site using SalesforceExperience Cloud. The partners will authenticate with an existing identity provider and the solution will utilizeSecurity Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegatedadministration will be used in the Expenence Cloud site to allow the partners to administer their users' access.How should a partner identity be provisioned in Salesforce for this solution?

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

Universal Containers (UC) has implemented a multi-org architecture in their company. Many users havelicences across multiple orgs, and they are complaining about remembering which org and credentials are tiedto which business process. Which two recommendations should the Architect make to address the Complaints?Choose 2 answers

Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post theirideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning userson Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decidesto use an API user using Oauth Username - password flow for the connection. How can the connection tosalesforce be restricted only to the employee portal server?