Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Identity & Access Management > Communities > Flashcards

Communities Flashcards

1
Q

How do you configure SAML for Communities?

A

Use site URL and org id for multiple SAML implementations.

e.g. Recipient=”https://acme.my.site.com/customers/login?so=00DD0000000JsCM”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What OAuth flows are supported for Communities?

A

All flows except Username-Password & SAML assertion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How is the token passed for OAuth flow in Communities?

A

As a bearer token in Authorization Header
e.g.
https://site.force.com/customers/services/data/v32.0/ -H
“Authorization: Bearer
00D50000000IehZ!AQcAQH0dMHZfz972Szmpkb58urFRkgeBGsxL_QJWwYMfAbUeeG7c1E6
LYUfiDUkWe6H34r1AAwOR8B8fLEz6n04NPGRrq0FM”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the authorize url for Communities in an OAuth flow?

A

https://acme.my.site.com/customers/services/oauth2/authorize?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the URL after the app is authorized in an OAUth flow?

A

https://acme.my.site.com/customers/services/oauth2/token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are components of guest user access in Communities?

A

Guest users get a guest user record and profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is external org access set to for Guest Users?

A

Private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are limitations of guest users?

A
  1. Can’t have more than Read Access
  2. Can’t be members of Public Groups or Queues
  3. Can’t get access to records via Manual or Apex Sharing
  4. Can’t have View All or Modify All access to objects
  5. Can’t be owner for new records (goes to default owner) or existing records
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What kind of Community user can a Non-partner or Person Account create?

A

Only Customer Community users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What permission do Salesforce license holders need to create external users?

A

Manage External Users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What permission do Partner & Customer community users need to create external users?

A

Delegated External User Administration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Salesforce do when a user self registers on a community?

A

Creates a Contact & User record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the name of the controller for self registration?

A

CommunitiesSelfRegController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are page options for self registration

A
  1. Default page
  2. Configurable self reg page - can use any identifier (e.g. phone number)
  3. Experience Builder page - can customise look & feel but requires username & password
  4. VF page - full control - can use CommunitiesSelfReg
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the methods you need to use in Apex to create Community users?

A
  1. CreatePortalUser
  2. CreateExternalUser
  3. CreatePersonAccountPortalUser
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What records can be created with JIT provisioning over SAML?

A

User, Contact & Account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

In which part of the SAML assertion is information for JIT provisioning sent?

A

saml:Attribute

18
Q

Where do you enable JIT provisioning in Salesforce

A

Single Sign On settings - ‘User Provisioning Enabled’

19
Q

What are the mandatory values you need to set for JIT provisioning?

A

SAML UserID Type = ‘Federation ID’

SAML Subject NameID = FederationID

20
Q

What are the fields you can send on Account for JIT provisioning?

A
  1. Name (must be unique)
  2. AccountNumber (must be unique)
  3. Owner
21
Q

What are the fields you can send on Contact for JIT provisioning?

A
  1. LastName

2. Email

22
Q

What are the field you can send on User for JIT provisioning?

A
  1. LastName
  2. Email
  3. Username
  4. ProfileID
  5. PortalRole
23
Q

What is the process sequence for JIT provisioning?

A
  1. Find user with matching FederationID
  2. Search all contacts for match on email
  3. Search all accounts for match on account name or account number
  4. if no match at any of the steps above, SF creates account, contact & user
24
Q

What are the ways of authenticating into a Community?

A
  1. Salesforce Identity
  2. Social Sign On using OpenID Connect
  3. Federated authentication using SAML
  4. Delegated authentication using Identity Connect
25
Q

What can be branded in Community login pages?

A
  1. Logos
  2. Background color
  3. Right frame URL content
  4. Footer
26
Q

How do dynamic URL’s work?

A

By replacing the {expid} experience ID parameter

27
Q

What is login discovery?

A

Allows use of other identifiers (such as phone) instead of username in login process. Salesforce requires vertification code sent in the next screen to match

28
Q

Can you use login discovery with allow users to log in directly to the site?

A

No

29
Q

How do you enable self registration for Person Accounts in a customer community

A
  1. Give access to self registration page to both person and business account record types
  2. Under Administration - Login & Registration, make sure Account field is empty
30
Q

What pages can be customised in a Community authentication flow?

A
  1. Login
  2. Forgot Password
  3. Self Registration
  4. Logout
31
Q

What can you customise in the Login process for Communities

A
  1. Controller i.e. logic

2. VF Page - UI

32
Q

How do you make custom pages and classes available for login configuration in Communities?

A
  1. Go to Workspaces - Administration - Pages
  2. Select ‘Go to Force.com’
  3. Select ‘Public Access Settings’
  4. Select ‘Enabled VisualForce Page Access’
  5. Select ‘Enabled Apex Classes’
33
Q

For passwordless login, what method do you call to login users without a password?

A

site.passwordlesslogin

34
Q

For passwordless login, How do you register & de-register users in Apex if Salesforce is handling the verification?

A

UserManagement.registerVerificationMethod

UserManagement.deregisterVerificationMethod

35
Q

For passwordless login, what are the methods available if you are handling the full verification process?

A
  1. initSelfRegistrationandverifySelfRegistration
  2. initPasswordlessLoginandverifyPasswordlessLogin
  3. initRegisterVerificationMethodandverifyRegisterVerificationMethod
36
Q

What are the steps required to enable Embedded Login?

A
  1. Enable cross-domain resource sharing.
  2. Create Embedded Login Connected App
  3. Enable Embedded Login on Web page
  4. Write Login & Logout functions
  5. Handle the callback
37
Q

How do you set up CORS in SF?

A

Setup -> CORS -> New

38
Q

What does CORS do?

A

Enable cross-origin request by populating the Access-Control-Allow-Origin header

39
Q

What are the 2 types of callback supported for embedded login?

A
  1. Client side - web page that receives the token

2. Server side - uses web server OAuth flow

40
Q

How can you monitor access into the SF org?

A
  1. Identity → Login History
  2. Identity → Identity Verification History
  3. Identity → Identity Provider Event Log (where SF is IDP)
  4. Mobile Device tracking (UserDevice and UserDeviceApplication objects)

Identity & Access Management (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions