Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP).
Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce.
How should the combined companys ' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

• A. Have generated links be prefixed with the appropriate IdP URL to invoke an idP-initiated Security Assertion Markup Language flow when clicked.
• B. Configure unique MyDomains for each company and have generated links use the appropriate MyDomain in the URL.
• C. Enable each IdP as a login option in the My Domain Authentication Service settings. Users will then click on the appropriate IdP button.
• D. Have generated links append a quenystring parameter indicating the IdP. The login service will redirect to the appropriate IdP.

Northern Trail Outfitters (NTO) would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal should be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have been purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

• A. Customize the self-registration Apps handler to temporarily associate the user to a shared single contact record.
• B. Select the "Configurable Self-Reg Page" option under Login & Registration.
• C. Select new customers and partners to self-register.
• D. Set up an external login page and call Salesforce APIs for user creation.
• E. Customize the self-registration Apps handler to create only the user record.

Northern Trail Outfitters (NTO) is planning to build a new customer service portal and wants to use passwordless login, allowing customers to login with a one-time passcode sent to them via email or SMS.
How should the quantity of required Identity Verification Credits be estimated?

• A. Each community comes with 10,000 Identity Verification Credits per month and only customers with more than 10,000 logins a month should estimate additional SMS verifications needed.
• B. Identity Verification Credits are consumed with each SMS (best message) sent and should be estimated based on the number of login verification challenges for SMS verification users.
• C. Identity Verification Credits are consumed with each verification sent and should be estimated based on the number of logins that will incur a verification challenge.
• D. Identity Verification Credits are a direct add-on license based on the number of existing member-based or login-based Community licenses.

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

• A. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to " Admin Pre-Approved " .
• B. Enable the Full Access Scope and then set the connected app access settings to " Admin Pre-Approved
  " .
• C. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to " Admin Pre-Approved " .
• D. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to " User may self authorize " .

Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce?
Choose 2 answers

• A. Request Salesforce Support to enable delegated authentication.
• B. Assign user " Is Single Sign-On Enabled " permission via profile or permission set.
• C. Enable My Domain and select " Prevent login from https://login.salesforce.com " .
• D. Once SSO is enabled, users are only able to login using Salesforce credentials.