MENU
Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community. UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?
Suggested Answer: B
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
MO
Mozell
7 months ago
IDP-initiated is straightforward and leverages their current identity store.
IS
Isadora
7 months ago
D) Web server seems too complex for their needs.
TI
Tiffiny
7 months ago
C) Sp-Initiated could be an option, but it’s not as smooth.
BR
Brianne
7 months ago
I agree, IDP-initiated makes sense for seamless access.
CH
Chauncey
8 months ago
I think B) IDP-initiated is the best choice. It fits their existing setup.
TA
Tawna
8 months ago
I doubt that will work smoothly with their existing setup.
KI
Kiley
8 months ago
I'm surprised they want to use the third-party portal as the main site.
VI
Vincenza
9 months ago
Totally agree, it makes the most sense!
SH
Shalon
9 months ago
I heard the correct answer is "Jedi mind trick." Works every time.
OR
Oretha
9 months ago
D) Web server? What is this, the dark ages?
TE
Terina
9 months ago
A) User-Agent? Really? That's so 90s.
IZ
Izetta
9 months ago
B) IDP-initiated sounds like the best option. Lets the identity provider handle the authentication.
CA
Cassie
9 months ago
C) SP-Initiated is the way to go. Keeps things simple and secure.
DE
Delisa
10 months ago
I thought the Web server flow was more for backend integrations, so I’m leaning towards IDP-initiated, but I could be wrong.
DO
Donette
10 months ago
I practiced a similar question, and I feel like the User-Agent flow could be relevant here, but I’m not confident.
JA
Jarvis
10 months ago
Hmm, this is a tricky one. I'll need to review the SAML flow options and think through how they would work with the existing LDAP store and third-party portal. I'm a bit unsure, but I'll do my best to analyze the requirements and come up with a solid recommendation.
WY
Wynell
10 months ago
I've got this! The key is to understand the different SAML flows and how they would fit with the requirements. SP-Initiated is probably the way to go, since we want the users to access the partner community through the existing portal. I'll make sure to double-check the details, but I'm feeling confident about this one.
KA
Karrie
10 months ago
Okay, let's see. We have an existing LDAP store and a third-party portal, and we need to enable SAML-based SSO for a Salesforce partner community. I'm thinking SP-Initiated might be the way to go, but I'll need to confirm how that would work with the existing setup.
EL
Eloisa
10 months ago
I think IDP-initiated is the way to go here.
NU
Nu
11 months ago
I'm not entirely sure, but I remember something about SP-Initiated being used when the service provider is the starting point.
MA
Marion
11 months ago
I think the IDP-initiated flow might be the right choice since the users are starting from the existing portal.
GL
Glory
11 months ago
A) User-Agent could work, but it might complicate things.
AD
Adria
11 months ago
Wait, isn't SP-initiated better for seamless access?
NE
Nelida
11 months ago
Hmm, this seems like a tricky one. I'll need to think through the requirements carefully - the existing LDAP store, the third-party portal, and the need for seamless access to the partner community. I'm leaning towards SP-Initiated, but I'll double-check the details.
JA
Jani
12 months ago
I think the key here is to understand the different SSO flow options and how they would work with the existing setup. I'll need to review the SAML flows to determine the best approach.
AD
Adela
6 months ago
True, the flow should minimize disruptions for users.
MA
Marvel
6 months ago
I think we should consider the user experience in the existing portal.
SH
Sheridan
6 months ago
But what about SP-Initiated? It might work well too.
RO
Royal
7 months ago
IDP-initiated seems like a good fit for seamless access.
FR
Francis
7 months ago
I agree, understanding the SSO flows is crucial.