Salesforce Exam Identity and Access Management Architect Topic 3 Question 40 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 40
Topic #: 3

[All Identity and Access Management Architect Questions]

Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.

Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?

AUse a Login Flow to query SAML attributes and set permission sets.

BUse a Login Flow with invocable Apex to callout to the security application and set permission sets.

CUse the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

DUse the Apex JIT handler to callout to the security application and set permission sets

Show Suggested Answer

Suggested Answer: B

by Elbert at May 30, 2024, 12:51 AM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chanel

10 months ago

Callout to the security app? I'd rather just call it quits and go hiking on the Northern Trail instead.

upvoted 0 times

...

Altha

11 months ago

Wait, we're supposed to query SAML attributes? I thought this was a Salesforce exam, not a linguistics test.

upvoted 0 times

Lelia

10 months ago

I agree, that sounds like the best option for reflecting functional group permissions as permission set assignments.

upvoted 0 times

...

Judy

10 months ago

I think using a Login Flow with invocable Apex to callout to the security application is the way to go.

upvoted 0 times

...

Susana

10 months ago

Yeah, it's important to query SAML attributes to set permission sets.

upvoted 0 times

...

Mitzie

11 months ago

I disagree, I believe option B is more efficient.

upvoted 0 times

...

Elke

11 months ago

Apex JIT handler? More like Apex JUST-IN-TIME-to-get-this-right-or-I'll-fail handler.

upvoted 0 times

Lindsey

10 months ago

Yeah, using the JIT handler seems like the best way to reflect functional group permissions as permission set assignments.

upvoted 0 times

...

Alberto

10 months ago

I agree, that sounds like the right approach.

upvoted 0 times

...

Xochitl

10 months ago

I think the answer is C) Use the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

upvoted 0 times

...