MENU
Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.
Which two mechanisms are used to provision agents with the appropriate permissions?
Choose 2 answers
Suggested Answer: B, D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
DE
Dewitt
3 days ago
I didn't know Login Flow could do that!
FE
Felicitas
8 days ago
Wait, can you really use JIT with an admin user?
RO
Roslyn
13 days ago
Definitely A and D!
KR
Krissy
19 days ago
I think B could work too, but not sure.
TE
Tegan
24 days ago
A and C seem like the right choices.
GE
German
29 days ago
Just-in-Time provisioning is super handy for this!
MI
Mi
1 month ago
B seems off, I don't think System Context can handle that.
LA
Lacresha
1 month ago
Wait, can you really run a JIT handler as an admin? Sounds risky!
RI
Ricarda
1 month ago
Totally agree, D is definitely the way to go!
LA
Lashaunda
2 months ago
A) and D) are the right choices for dynamic updates.
MI
Miriam
2 months ago
I have a feeling that using the JIT handler class is the key, but I'm confused about which option is the best for updating roles dynamically.
LO
Lorrie
2 months ago
I practiced a similar question about provisioning permissions, and I feel like Login Flow might be the right choice, but I can't remember the specifics.
FE
Fernanda
2 months ago
I think the JIT handler class is important here, but I can't recall if it should run as the current user or an admin user.
EU
Eura
2 months ago
I remember we discussed Login Flows, but I'm not sure if it should be in User Context or System Context for this scenario.