Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 3 Question 57 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 57
Topic #: 3

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly knot as G Suite).

An identity and access management (IAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.

Which solution is recommended to meet this requirement?

AConfigure user Provisioning for Connected Apps.

BUpdate the Security Assertion Markup Language Just-in-Time (SAML JIT) handler in Salesforce for user provisioning and de-provisioning.

CBuild a custom REST endpoint in Salesforce that Google Workspace can poll against.

DBuild an Apex trigger on the userlogin object to make asynchronous callouts to Google APIs.

Show Suggested Answer

Suggested Answer: A

by Jules at Jan 24, 2025, 08:35 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Simona

5 months ago

Totally agree with A, it simplifies everything!

upvoted 0 times

...

Sophia

5 months ago

Wait, can you really automate all that with just A?

upvoted 0 times

...

Maynard

5 months ago

C sounds complicated, not sure if it's worth it.

upvoted 0 times

...

Felix

5 months ago

I think B might be more secure though.

upvoted 0 times

...

Elly

6 months ago

A is the way to go for user provisioning!

upvoted 0 times

...

Veta

6 months ago

I vaguely remember something about Apex triggers, but I'm not confident if they can handle all the user actions mentioned in the question.

upvoted 0 times

...

Jesusita

6 months ago

I feel like building a custom REST endpoint could work, but it seems a bit complex for this scenario.

upvoted 0 times

...

German

6 months ago

I think option B sounds familiar. We practiced SAML JIT handling, but I can't recall if it covers user de-provisioning too.

upvoted 0 times

...

Mariann

6 months ago

I remember we discussed user provisioning in our last class, but I'm not entirely sure if it's specifically for connected apps.

upvoted 0 times

...

Lashaunda

6 months ago

I'm feeling pretty confident about this one. Based on the requirements, the user Provisioning for Connected Apps seems like the most straightforward and recommended solution. I'll make sure to carefully read through the details of that option.

upvoted 0 times

...

Kimberely

6 months ago

Okay, I've got a strategy here. I think the most efficient solution would be to use the user Provisioning for Connected Apps feature in Salesforce. That way, the user actions in Salesforce can automatically sync with Google Workspace without having to build custom integrations.

upvoted 0 times

...

Elenore

6 months ago

Hmm, I'm a bit unsure about this one. There are a few different options presented, and I'm not sure which one would be the best approach. I'll need to think through the pros and cons of each solution.

upvoted 0 times

...

Fatima

7 months ago

This seems like a straightforward question about user provisioning and de-provisioning between Salesforce and Google Workspace. I think the key is to look for the most efficient and automated solution.

upvoted 0 times

...

Odelia

1 year ago

Option B sounds like the way to go. SAML JIT is the Swiss Army knife of user provisioning. It's like a duct tape for your IAM problems.

upvoted 0 times

...

Jani

1 year ago

Hold up, are we talking about Salesforce and Google Workspace? This is like the tech version of the Pepsi vs. Coke debate. Buckle up, folks!

upvoted 0 times

Theodora

1 year ago

D) Build an Apex trigger on the userlogin object to make asynchronous callouts to Google APIs.

upvoted 0 times

...

Yuonne

1 year ago

C) Build a custom REST endpoint in Salesforce that Google Workspace can poll against.

upvoted 0 times

...

Joseph

1 year ago

B) Update the Security Assertion Markup Language Just-in-Time (SAML JIT) handler in Salesforce for user provisioning and de-provisioning.

upvoted 0 times

...

Abraham

1 year ago

A) Configure user Provisioning for Connected Apps.

upvoted 0 times

...

Chauncey

1 year ago

This is a no-brainer. Option C all the way! Building a custom REST endpoint is the future, man. Google Workspace will be knocking on your door in no time.

upvoted 0 times

...

Marylyn

1 year ago

I'm leaning towards option D) Build an Apex trigger for asynchronous callouts, it seems like a solid choice.

upvoted 0 times

...

Louvenia

1 year ago

Option D is the way to go! Apex triggers are the perfect tool for automating user actions across multiple systems. Plus, who doesn't love some good old-fashioned asynchronous callouts?

upvoted 0 times

Alpha

1 year ago

Apex triggers can definitely streamline the process and make it more efficient.

upvoted 0 times

...

Tiara

1 year ago

I think it's important to have a seamless process for user management across different platforms.

upvoted 0 times

...

Renay

1 year ago

It's definitely a reliable solution for integrating Salesforce with Google Workspace.

upvoted 0 times

...

Marvel

1 year ago

I agree, using Apex triggers for asynchronous callouts is a great way to automate user actions.

upvoted 0 times

...

Verda

1 year ago

I personally think option C) Build a custom REST endpoint is the way to go for this scenario.

upvoted 0 times

...

Ashanti

1 year ago

I'd go with Option B. Integrating SAML JIT is a standard way to handle user provisioning across systems. Simple and reliable.

upvoted 0 times

Ruby

1 year ago

User 2

upvoted 0 times

...

Kenny

1 year ago

User 1

upvoted 0 times

...

Dortha

1 year ago

I disagree, I believe option B) Update the Security Assertion Markup Language Just-in-Time (SAML JIT) handler is more efficient.

upvoted 0 times

...

Vicente

1 year ago

Option A seems like the obvious choice. Why overcomplicate things when Salesforce already has a built-in user provisioning feature for connected apps?

upvoted 0 times