Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?

Question

Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.

Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?

Pushparaj A · Accepted Answer

Use the Apex Just-in-Time handler to query custom SAML attributes and set permission sets.

Pushparaj A · Answer

Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.

Pushparaj A · Answer

Use a login flow to query custom SAML attributes and set permission sets.

Pushparaj A · Answer

Use a login flow to query standard SAML attributes and set permission sets.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 226 - Certified Identity and Access Management Architect discussion

Suggested answer: B

0 comments