250-215 Salesforce Practice Questions

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution: * 1. Users should not have to login every time they use the app. * 2. The app should be able to make calls to the Salesforce REST API. * 3. End users should NOT see the OAuth approval page. How should the identity architect configure the Salesforce connected app to meet the requirements?

• AA. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to
• BB. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
• CC. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
• DD. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".

An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community. What portion of the authentication provider setup associates a Facebook user with a salesforce user?

• AA. Consumer key and consumer secret
• BB. Federation ID
• CC. User info endpoint URL
• DD. Apex registration handler

The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience. What should be used and considered before recommending it as a solution on the Salesforce Platform?

• AA. OpenID Connect Web Server Flo
• BB. Determine if the service provider is secure enough to store the client secret on.
• CC. Embedded Logi
• DD. Identify what level of UI customization will be required to make it match the service providers look and feel.

Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

• AA. Use the same SAML Identity location as the first org.
• BB. Use a different Entity ID than the first org.
• CC. Use the same request bindings as the first org.
• DD. Use the Salesforce Username as the SAML Identity Type.