Salesforce Exam Identity and Access Management Architect Topic 5 Question 38 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 38
Topic #: 5

[All Identity and Access Management Architect Questions]

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.

What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

AEnsure that there is an HTTPS connection between IDP and SP.

BEnsure that on the SSO settings page, the 'Request Signing Certificate' field has a self-signed certificate.

CEnsure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

DEncrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Show Suggested Answer

Suggested Answer: D

by Edison at May 07, 2024, 05:27 PM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Angelyn

11 months ago

True, but end-to-end encryption with CA signed certs might ensure trust the most.

upvoted 0 times

...

Rosina

11 months ago

Encryption seems robust but self-signed certificates are pretty common.

upvoted 0 times

...

Arlyne

11 months ago

Option B? A self-signed certificate? What is this, amateur hour? Definitely go with the CA-signed certificate, option D all the way!

upvoted 0 times

Adell

9 months ago

User1

upvoted 0 times

...

Christiane

10 months ago

User2

upvoted 0 times

...

Terina

10 months ago

Definitely go with the CA-signed certificate, option D all the way!

upvoted 0 times

...

Blondell

10 months ago

Option B? A self-signed certificate? What is this, amateur hour?

upvoted 0 times

...

Ernest

10 months ago

Yeah, option D is the way to go for extra security and trust between the SP and IdP.

upvoted 0 times

...

Cecily

10 months ago

Cecily is right, go with option D, the CA-signed certificate for sure.

upvoted 0 times

...

Thaddeus

11 months ago

Option B? A self-signed certificate? What is this, amateur hour?

upvoted 0 times

...

Weldon

11 months ago

I am considering the option about encrypting the SAML Request. D, right?

upvoted 0 times

...

Charlena

11 months ago

This is a tricky one, but I'd go with option D. Gotta keep that SAML request secure, even if it means a little more work.

upvoted 0 times

...

Adell

11 months ago

I agree with Aliza. Encryption is the best way to protect the SAML request from being tampered with. Option D is the clear choice here.

upvoted 0 times

Gladys

11 months ago

User B

upvoted 0 times

...

Timothy

11 months ago

User A

upvoted 0 times

...

Garry

11 months ago

I think the right answer might be using an HTTPS connection?

upvoted 0 times

...

Annamae

12 months ago

Option C seems like the most straightforward solution. Ensuring the Issuer and ACS URL are properly configured is crucial for a successful SSO integration.

upvoted 0 times