MENU
Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?
Suggested Answer: C
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
TH
Theresia
10 months ago
I like C too, it’s all about that seamless experience!
AL
Alpha
11 months ago
I disagree, A could be more efficient for user provisioning.
LA
Laurel
11 months ago
Option C seems like the best choice for immediate access!
JO
Josephine
11 months ago
Wait, does Just-in-Time provisioning really work that smoothly?
NO
Noah
11 months ago
B sounds like a lot of extra work for something that could be automated.
AL
Alline
11 months ago
I recall a practice question about login flows, but I'm not clear if creating inactive users is the best approach for immediate access.
DO
Dominque
12 months ago
I feel like the integration that queries LDAP periodically might not be fast enough for new hires.
ME
Merlyn
12 months ago
I’m not entirely sure, but I think using Salesforce Identity Connect could help with automatic provisioning too, right?
HI
Hildred
1 year ago
I remember studying about Just-in-Time provisioning, and it seems like it would be the best fit for immediate access.
PA
Pamella
1 year ago
I've dealt with similar identity integration challenges before. I think option A or C would be the most efficient way to handle this.
MY
Myra
1 year ago
I'm not too familiar with SAML and LDAP, so I'll need to review those concepts before deciding on the best solution.
AS
Ashley
1 year ago
Okay, let's see. The key is to minimize Salesforce license usage, so I'm thinking option C might be the best approach here.
JA
Jaime
1 year ago
Hmm, I'm a bit confused about the different identity and provisioning options here. I'll need to think this through carefully.
AL
Alpha
1 year ago
This looks like a straightforward identity and access management question. I think I can handle this one.
VE
Veta
1 year ago
Haha, I wonder if the new employees will get a 'Just-in-Time' welcome message from Salesforce. 'Welcome aboard, you're hired!'
LO
Lonna
1 year ago
I agree, C is the best option. It creates new Salesforce users on-the-fly, which is perfect for minimizing license usage.
AN
Annmarie
1 year ago
I agree, C is the best option. It creates new Salesforce users on-the-fly, which is perfect for minimizing license usage.
LO
Lourdes
1 year ago
C) Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login.
MA
Marylou
1 year ago
I think option D could work too, it provides a way to activate users at first login.
GA
Gail
1 year ago
I'm not sure, option C also seems like a viable option to me.
MY
Myra
1 year ago
Option C seems like the way to go. Automating user provisioning using SAML attributes is the most efficient approach here.
OL
Olene
1 year ago
C) Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login.
RU
Ruth
1 year ago
A) Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
TI
Tish
1 year ago
C) Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login.
IR
Ira
1 year ago
I agree with Anika, Salesforce Identity Connect sounds like the most efficient solution.
AN
Anika
1 year ago
I think option A is the best choice.