MENU
Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers
Suggested Answer: B
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
BA
Basilia
11 months ago
I thought the Federation ID could be anything, not just a username.
ET
Ettie
11 months ago
I’ve seen issues with D before, always double-check that field!
AS
Ashleigh
12 months ago
Wait, does the Federation ID really need to be an email? That seems odd.
HA
Haydee
12 months ago
I think B is important too, case sensitivity can trip you up!
LE
Leonor
12 months ago
A and D are definitely key points to check.
BE
Bea
1 year ago
I thought the Federation ID had to be in email format, but I can't recall if that's a strict requirement. Maybe option C is less relevant?
KI
King
1 year ago
I practiced a similar question where the Federation ID had to be populated on the user record, so I feel like option D is definitely worth considering.
DE
Denise
1 year ago
I’m not entirely sure, but I think the case sensitivity of the Federation ID might be a factor too. That could be option B?
LE
Lenna
1 year ago
I remember something about the Federation ID needing to match the Salesforce username, so I think option A could be important.
NA
Nada
1 year ago
This seems straightforward. If the virtual server is responsive, then the node monitor must have failed, allowing the node to remain active despite any issues.
KI
Kiley
1 year ago
Hmm, I'm a bit unsure about this one. I know Scrum has some specific ceremonies and artifacts, but I'll need to think through them carefully to determine which ones are required.
LE
Leonie
1 year ago
I'm a bit confused by this one. Is it asking about the file naming convention in the Recycle Bin? I'll have to think it through carefully.
JE
Jerry
1 year ago
Split testing is all about testing different ad variations, so I'm going to go with option D.
CA
Carey
1 year ago
The Federation ID must be a magical unicorn horn, forged in the fires of Mount Doom. Anything less and SAML will just laugh in your face.
CL
Clay
1 year ago
I bet the architect is pulling their hair out trying to figure this one out. Maybe they should just turn it off and on again?
MY
Myrtie
1 year ago
B) The Federation ID must is case sensitive
LE
Leatha
1 year ago
Maybe they should just turn it off and on again?
CR
Cristal
1 year ago
D) The Federation ID must be populated on the user record.
MI
Mitzie
1 year ago
A) The Federation ID must be a valid Salesforce Username
LA
Laura
1 year ago
Of course the Federation ID needs to be populated on the user record. It's like the basic building block of this whole SAML setup.
CA
Carylon
1 year ago
Wait, the Federation ID has to be an email address? That's a weird constraint. Who came up with these rules?
DA
Daryl
1 year ago
Hmm, the Federation ID being a valid Salesforce username seems like a reasonable requirement. Better double-check that.
WE
Weldon
1 year ago
User 3: Let's also make sure the Federation ID is populated on the user record.
KA
Kayleigh
1 year ago
User 2: Yes, I think that's one of the considerations we need to review.
RA
Raylene
1 year ago
User 1: Have you checked if the Federation ID is a valid Salesforce username?
AL
Alex
1 year ago
D) The Federation ID must be populated on the user record.
LE
Levi
1 year ago
A) The Federation ID must be a valid Salesforce Username
RY
Ryan
2 years ago
The Federation ID being case sensitive is definitely something to look into. Salesforce can be picky about that kind of thing.
MA
Marylyn
1 year ago
B) The Federation ID must is case sensitive
BR
Brande
1 year ago
A) The Federation ID must be a valid Salesforce Username
DA
Dahlia
1 year ago
B) The Federation ID must is case sensitive
RO
Rosalia
1 year ago
A) The Federation ID must be a valid Salesforce Username
YV
Yvette
2 years ago
I'm not sure about the case sensitivity of the Federation ID. Can someone clarify that?
YA
Yasuko
2 years ago
I agree with Ora. Also, the Federation ID must be populated on the user record.
OR
Ora
2 years ago
I think the Federation ID must be a valid Salesforce Username.