Discuss Salesforce Salesforce Certified Platform Identity And Access Management Architect (Plat-Arch-203) Exam Topic 6 Question 13

A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can help.

Which two considerations should the architect keep in mind?

Choose 2 answers

AAMR field shows the authentication methods used at IdP.

BBoth OIDC and Security Assertion Markup Language (SAML) are supported but AMR must be implemented at IdP.

CHigh-assurance sessions must be configured under Session Security Level Policies.

DDependency on what is supported by OpenID Connect (OIDC) implementation at IdP.

Suggested Answer: A, B

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Brittni 12 months ago

High-assurance sessions? Sounds like extra work!

Luis 12 months ago

Both OIDC and SAML are supported, but AMR needs to be set up at IdP.

King 12 months ago

Wait, does that mean we need to update our IdP settings too?

Marjory 1 year ago

Totally agree, that's crucial for tracking!

Maricela 1 year ago

AMR field shows the authentication methods used at IdP.

Selma 1 year ago

I think the dependency on OIDC implementation at the IdP is a key consideration, but I’m not clear on how that affects the AMR field specifically.

Christiane 1 year ago

I feel like high-assurance sessions are crucial, especially with MFA, but I can't recall if they need specific policies in place.

Chantell 1 year ago

I remember that both OIDC and SAML are relevant here, but I’m a bit confused about whether AMR needs to be set up at the IdP level or not.

Latrice 1 year ago

I think the AMR field is really important because it shows the authentication methods used at the IdP, but I'm not entirely sure how that impacts the overall security.

Layla 1 year ago

I'm pretty sure A and C will cause compilation errors, since the variable names need to start with a lowercase letter and the Float type is not valid.

Rodney 1 year ago

The Engagement Split seems like it could work for this, but I'm not 100% confident that's the right answer.

Dolores 1 year ago

Wait, which option is the correct answer? I'm not sure if I'm supposed to use a stream or a for-each loop. I better double-check the details.

Anastacia 1 year ago

I feel like a router mainly connects different networks, but I'm not 100% sure if it also does local traffic forwarding.

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 6 Question 13 Discussion