General Identity Concepts

Question 1

Define Salesforce Identity

Answer 1

Connects Salesforce org users (employees) with external apps and services

Question 2

Define Salesforce Customer 360 Identity

Answer 2

Connects your customers and partners with external apps and services

Question 3

How does deep linking work in SSO?

Answer 3

e.g. add /home/home.jsp?a=b lands you in that location after authentication.
Uses relaystate on SP initiated SSO

Question 4

Name 2 patterns for authentication?

Answer 4

Hub and Spoke and Login Discovery

Question 5

What is Lightning Login?

Answer 5

A passwordless login method that is set on the User record. Requires authenticator to be set up

Question 6

What are the 2 ways of setting up MFA?

Answer 6

1. User permission: Multi-Factor Authentication for User Interface Logins
2. Session Security Level required at Login: High Assurance

Question 7

Where do you define Session Security Levels?

Answer 7

Security -> Session Settings

Question 8

What permission do you use for API MFA usage?

Answer 8

Multi-Factor Authentication for API Logins

Question 9

What is the pre-requisite for the Multi-Factor Authentication for API Logins permission?

Answer 9

The Multi-Factor Authentication for User Interface Logins permission is required

Question 10

Can API Enabled only users access the UI?

Answer 10

Yes, only to register for MFA

Question 11

How do you set up MFA with SSO?

Answer 11

1. Configure IDP to check MFA on their side

2. Add SSO configuration to High Assurance in Session Security Settings

Question 12

How do you satisfy the requirement for a login experience that doesn’t include browser redirects?

Answer 12

Embedded Login

Question 13

How do you set up an interview based login process?

Answer 13

My Domain - Authentication Configuration

Login Page Type = Discovery