Salesforce Exam Identity and Access Management Architect Topic 5 Question 38 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 38
Topic #: 5

[All Identity and Access Management Architect Questions]

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.

What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

AEnsure that there is an HTTPS connection between IDP and SP.

BEnsure that on the SSO settings page, the 'Request Signing Certificate' field has a self-signed certificate.

CEnsure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

DEncrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Show Suggested Answer

Suggested Answer: D

by Edison at May 07, 2024, 05:27 PM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Angelyn

6 months ago

True, but end-to-end encryption with CA signed certs might ensure trust the most.

upvoted 0 times

...

Rosina

6 months ago

Encryption seems robust but self-signed certificates are pretty common.

upvoted 0 times

...

Arlyne

6 months ago

Option B? A self-signed certificate? What is this, amateur hour? Definitely go with the CA-signed certificate, option D all the way!

upvoted 0 times

Adell

5 months ago

User1

upvoted 0 times

...

Christiane

5 months ago

User2

upvoted 0 times

...

Terina

5 months ago

Definitely go with the CA-signed certificate, option D all the way!

upvoted 0 times

...

Blondell

5 months ago

Option B? A self-signed certificate? What is this, amateur hour?

upvoted 0 times

...

Ernest

6 months ago

Yeah, option D is the way to go for extra security and trust between the SP and IdP.

upvoted 0 times

...

Cecily

6 months ago

Cecily is right, go with option D, the CA-signed certificate for sure.

upvoted 0 times

...

Thaddeus

6 months ago

Option B? A self-signed certificate? What is this, amateur hour?

upvoted 0 times

...

Weldon

7 months ago

I am considering the option about encrypting the SAML Request. D, right?

upvoted 0 times

...

Charlena

7 months ago

This is a tricky one, but I'd go with option D. Gotta keep that SAML request secure, even if it means a little more work.

upvoted 0 times

...

Adell

7 months ago

I agree with Aliza. Encryption is the best way to protect the SAML request from being tampered with. Option D is the clear choice here.

upvoted 0 times

Gladys

6 months ago

User B

upvoted 0 times

...

Timothy

6 months ago

User A

upvoted 0 times

...

Garry

7 months ago

I think the right answer might be using an HTTPS connection?

upvoted 0 times

...

Annamae

7 months ago

Option C seems like the most straightforward solution. Ensuring the Issuer and ACS URL are properly configured is crucial for a successful SSO integration.

upvoted 0 times