Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 4 Question 82 Discussion

Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.Which two mechanisms are used to provision agents with the appropriate permissions?Choose 2 answers
B) Use Login Flow in System Context to update role and permission sets. and D) Use SAML Just-in-Time (JIT) handler class run as an admin user to update role and permission sets.
A) Use Login Flow in User Context to update role and permission sets.
C) Use SAML Just-m-Time (JIT) Handler class run as current user to update role and permission sets.

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 4 Question 82 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam
Question #: 82
Topic #: 4
[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.

Which two mechanisms are used to provision agents with the appropriate permissions?

Choose 2 answers

Show Suggested Answer Hide Answer
Suggested Answer: B, D

by Laura at Aug 13, 2026, 01:32 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lashaunda
3 days ago
A) and D) are the right choices for dynamic updates.
upvoted 0 times
...
Miriam
8 days ago
I have a feeling that using the JIT handler class is the key, but I'm confused about which option is the best for updating roles dynamically.
upvoted 0 times
...
Lorrie
13 days ago
I practiced a similar question about provisioning permissions, and I feel like Login Flow might be the right choice, but I can't remember the specifics.
upvoted 0 times
...
Fernanda
18 days ago
I think the JIT handler class is important here, but I can't recall if it should run as the current user or an admin user.
upvoted 0 times
...
Eura
23 days ago
I remember we discussed Login Flows, but I'm not sure if it should be in User Context or System Context for this scenario.
upvoted 0 times
...

Save Cancel