Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

• A. Either sp - or IDP - initiated SSO will work
• B. IDP - initiated SSO will not work
• C. Sp-Initiated SSO will not work
• D. Neithersp - nor IDP - initiated SSO will work

Refer to the exhibit.

Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts. A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site. NTO wants to make sure it renders login page images dynamically based on the user's brand preference selected in Heroku before Authorization. what should an identity architect do to fulfill the above requirements?

• A. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authonze/expid_value.
• B. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authorize/cookie_value.
• C. Create multiple login screens using Experience Builder and use Login Flows at runtime to route to different login screens.
• D. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Apex.

Universal containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users. Which three items should UC take into consideration while building the Web service to handle the Delegated Authentication request? Choose 3 answers

• A. The web service can be written using either the soap or rest protocol.
• B. The web service needs to include Source IP as a method parameter.
• C. The return type of the Web service method should be a Boolean value
• D. Delegated Authentication is enabled for the system administrator profile.
• E. UC should whitelist all salesforce ip ranges on their corporate firewall.

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers

• A. Refresh Token
• B. Authorization Code
• C. Verification Code
• D. Client ID
• E. Scopes