Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 3 Question 40 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 40
Topic #: 3

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.

Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?

AUse a Login Flow to query SAML attributes and set permission sets.

BUse a Login Flow with invocable Apex to callout to the security application and set permission sets.

CUse the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

DUse the Apex JIT handler to callout to the security application and set permission sets

Show Suggested Answer

Suggested Answer: B

by Elbert at May 30, 2024, 12:51 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aron

3 months ago

Option C sounds interesting, but is it really the most efficient?

upvoted 0 times

...

Leota

3 months ago

I’m surprised they didn’t mention using JIT in the context of SAML.

upvoted 0 times

...

Antonio

3 months ago

Wait, why would we use a Login Flow for this? Seems off.

upvoted 0 times

...

Vernell

4 months ago

Totally agree, B makes the most sense!

upvoted 0 times

...

Mabel

4 months ago

I think option B is the best choice here.

upvoted 0 times

...

Alease

4 months ago

I'm a bit confused about the difference between using a callout versus querying SAML attributes in this context.

upvoted 0 times

...

Willis

4 months ago

I feel like we practiced a similar question, and I lean towards option B, but I can't recall the specifics of why.

upvoted 0 times

...

Fanny

4 months ago

I think using the Apex JIT handler might be more effective, especially if we need to call out to the security application.

upvoted 0 times

...

Kasandra

5 months ago

I remember we discussed using Login Flows, but I'm not sure if querying SAML attributes is the best approach for setting permission sets.

upvoted 0 times

...

Rodrigo

5 months ago

Okay, I think I've got it! Option B is the way to go. By using the Login Flow and invocable Apex, you can seamlessly integrate the Salesforce permission sets with the security application's group permissions. That's the most robust and flexible approach in my opinion.

upvoted 0 times

...

Nieves

5 months ago

I'm a bit confused by the SAML and JIT handler options. Can those really be used to sync the permission sets across the systems? I'm not as familiar with those features, so I'll need to do some more research before deciding.

upvoted 0 times

...

Farrah

5 months ago

Ah, this is right up my alley! I'd go with option B - using a Login Flow with invocable Apex to call out to the security application and set the permission sets. That way, you can keep the integration between Salesforce and the external system clean and maintainable.

upvoted 0 times

...

Melinda

5 months ago

Okay, let's see here. I think the key is figuring out how to best integrate the Salesforce permission sets with the security application's group permissions. The Login Flow options seem promising, but I'm not sure which one would be the most effective.

upvoted 0 times

...

Sheridan

5 months ago

Hmm, this looks like a tricky one. I'll need to think through the different options carefully to make sure I understand the implications of each approach.

upvoted 0 times

...

Javier

5 months ago

Wait, I'm not sure if that's right. Isn't the purpose to actually delete the malicious files, not just notify users? I'll have to re-read the question.

upvoted 0 times

...

Wilson

5 months ago

Ah, I see what's going on here. The application is using AQ, so we'll need to make sure the Oracle AQ Java EE Shared Libraries are deployed and referenced by the app. That's probably the key missing piece in this configuration.

upvoted 0 times

...

Chanel

2 years ago

Callout to the security app? I'd rather just call it quits and go hiking on the Northern Trail instead.

upvoted 0 times

...

Altha

2 years ago

Wait, we're supposed to query SAML attributes? I thought this was a Salesforce exam, not a linguistics test.

upvoted 0 times

Lelia

2 years ago

I agree, that sounds like the best option for reflecting functional group permissions as permission set assignments.

upvoted 0 times

...

Judy

2 years ago

I think using a Login Flow with invocable Apex to callout to the security application is the way to go.

upvoted 0 times

...

Susana

2 years ago

Yeah, it's important to query SAML attributes to set permission sets.

upvoted 0 times

...

Mitzie

2 years ago

I disagree, I believe option B is more efficient.

upvoted 0 times

...

Elke

2 years ago

Apex JIT handler? More like Apex JUST-IN-TIME-to-get-this-right-or-I'll-fail handler.

upvoted 0 times

Lindsey

2 years ago

Yeah, using the JIT handler seems like the best way to reflect functional group permissions as permission set assignments.

upvoted 0 times

...

Alberto

2 years ago

I agree, that sounds like the right approach.

upvoted 0 times

...

Xochitl

2 years ago

I think the answer is C) Use the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

upvoted 0 times

...