Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 1 Question 70 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 70
Topic #: 1

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community. UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?

AUser-Agent

BIDP-initiated

CSp-Initiated

DWeb server

Show Suggested Answer

Suggested Answer: B

by Jamal at Nov 25, 2025, 12:55 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mozell

2 months ago

IDP-initiated is straightforward and leverages their current identity store.

upvoted 0 times

...

Isadora

2 months ago

D) Web server seems too complex for their needs.

upvoted 0 times

...

Tiffiny

2 months ago

C) Sp-Initiated could be an option, but it’s not as smooth.

upvoted 0 times

...

Brianne

2 months ago

I agree, IDP-initiated makes sense for seamless access.

upvoted 0 times

...

Chauncey

3 months ago

I think B) IDP-initiated is the best choice. It fits their existing setup.

upvoted 0 times

...

Tawna

3 months ago

I doubt that will work smoothly with their existing setup.

upvoted 0 times

...

Kiley

3 months ago

I'm surprised they want to use the third-party portal as the main site.

upvoted 0 times

...

Vincenza

3 months ago

Totally agree, it makes the most sense!

upvoted 0 times

...

Shalon

4 months ago

I heard the correct answer is "Jedi mind trick." Works every time.

upvoted 0 times

...

Oretha

4 months ago

D) Web server? What is this, the dark ages?

upvoted 0 times

...

Terina

4 months ago

A) User-Agent? Really? That's so 90s.

upvoted 0 times

...

Izetta

4 months ago

B) IDP-initiated sounds like the best option. Lets the identity provider handle the authentication.

upvoted 0 times

...

Cassie

4 months ago

C) SP-Initiated is the way to go. Keeps things simple and secure.

upvoted 0 times

...

Delisa

5 months ago

I thought the Web server flow was more for backend integrations, so I’m leaning towards IDP-initiated, but I could be wrong.

upvoted 0 times

...

Donette

5 months ago

I practiced a similar question, and I feel like the User-Agent flow could be relevant here, but I’m not confident.

upvoted 0 times

...

Jarvis

5 months ago

Hmm, this is a tricky one. I'll need to review the SAML flow options and think through how they would work with the existing LDAP store and third-party portal. I'm a bit unsure, but I'll do my best to analyze the requirements and come up with a solid recommendation.

upvoted 0 times

...

Wynell

5 months ago

I've got this! The key is to understand the different SAML flows and how they would fit with the requirements. SP-Initiated is probably the way to go, since we want the users to access the partner community through the existing portal. I'll make sure to double-check the details, but I'm feeling confident about this one.

upvoted 0 times

...

Karrie

5 months ago

Okay, let's see. We have an existing LDAP store and a third-party portal, and we need to enable SAML-based SSO for a Salesforce partner community. I'm thinking SP-Initiated might be the way to go, but I'll need to confirm how that would work with the existing setup.

upvoted 0 times

...

Eloisa

5 months ago

I think IDP-initiated is the way to go here.

upvoted 0 times

...

Nu

6 months ago

I'm not entirely sure, but I remember something about SP-Initiated being used when the service provider is the starting point.

upvoted 0 times

...

Marion

6 months ago

I think the IDP-initiated flow might be the right choice since the users are starting from the existing portal.

upvoted 0 times

...

Glory

6 months ago

A) User-Agent could work, but it might complicate things.

upvoted 0 times

...

Adria

6 months ago

Wait, isn't SP-initiated better for seamless access?

upvoted 0 times

...

Nelida

6 months ago

Hmm, this seems like a tricky one. I'll need to think through the requirements carefully - the existing LDAP store, the third-party portal, and the need for seamless access to the partner community. I'm leaning towards SP-Initiated, but I'll double-check the details.

upvoted 0 times

...

Jani

7 months ago

I think the key here is to understand the different SSO flow options and how they would work with the existing setup. I'll need to review the SAML flows to determine the best approach.

upvoted 0 times