Authentic Salesforce Certification Exam Identity-and-Access-Management-Architect Questions Answers

 To allow users to login with their Facebook or LinkedIn credentials, Salesforce will play the role of a service provider (SP). A SP is an entity that relies on an identity provider (IdP) to authenticate and authorize users. In this scenario, Facebook and LinkedIn are the IdPs, and Salesforce is the SP. The SP receives a token from the IdP and uses it to access Salesforce resources. The other options are not correct for this scenario. References: Service Provider, Social Sign-On with Authentication Providers

The OAuth 2.0 Device Flow is a type of authorization flow that allows users to register an IoT device with limited display input or capabilities, such as a smart TV, a printer, or a smart speaker1. The device flow works as follows1:

• The device displays or reads out a verification code and a verification URL to the user.
• The user visits the verification URL on another device, such as a smartphone or a laptop, and enters the verification code.
• The user logs in to Salesforce and approves the device.
• The device polls Salesforce for an access token using the verification code.
• Salesforce returns an access token to the device, which can then access Salesforce APIs.

References:

• OAuth 2.0 Device Flow

OpenID Connect is an authentication protocol that allows a service provider to obtain user attributes in an ID token from an IdP. The other flows are OAuth 2.0 flows that are used for authorization, not authentication. References: Configure an Authentication Provider Using OpenID Connect, Integrate Service Providers as Connected Apps with OpenID Connect