Salesforce Exam Identity and Access Management Architect Topic 3 Question 40 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 40
Topic #: 3

[All Identity and Access Management Architect Questions]

Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.

Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?

AUse a Login Flow to query SAML attributes and set permission sets.

BUse a Login Flow with invocable Apex to callout to the security application and set permission sets.

CUse the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

DUse the Apex JIT handler to callout to the security application and set permission sets

Show Suggested Answer

Suggested Answer: B

by Elbert at May 30, 2024, 12:51 AM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chanel

1 years ago

Callout to the security app? I'd rather just call it quits and go hiking on the Northern Trail instead.

upvoted 0 times

...

Altha

1 years ago

Wait, we're supposed to query SAML attributes? I thought this was a Salesforce exam, not a linguistics test.

upvoted 0 times

Lelia

12 months ago

I agree, that sounds like the best option for reflecting functional group permissions as permission set assignments.

upvoted 0 times

...

Judy

1 years ago

I think using a Login Flow with invocable Apex to callout to the security application is the way to go.

upvoted 0 times

...

Susana

1 years ago

Yeah, it's important to query SAML attributes to set permission sets.

upvoted 0 times

...

Mitzie

1 years ago

I disagree, I believe option B is more efficient.

upvoted 0 times

...

Elke

1 years ago

Apex JIT handler? More like Apex JUST-IN-TIME-to-get-this-right-or-I'll-fail handler.

upvoted 0 times

Lindsey

12 months ago

Yeah, using the JIT handler seems like the best way to reflect functional group permissions as permission set assignments.

upvoted 0 times

...

Alberto

12 months ago

I agree, that sounds like the right approach.

upvoted 0 times

...

Xochitl

12 months ago

I think the answer is C) Use the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

upvoted 0 times

...