Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers

• A. Verification Code
• B. Authorization Code
• C. Client ID
• D. Refresh Token
• E. Scopes

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce.
How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

• A. Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.
• B. Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.
• C. Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.
• D. Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.

Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropnate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement?
Choose 3 answers

• A. Enable User Provisioning for the connected app.
• B. Create an approval process for UserProvisionlngRequest object associated with the provisioning flow.
• C. Create an approval process for a custom object associated with the provisioning flow.
• D. Create a connected app for Concur in Salesforce.
• E. Create an approval process for user object associated with the provisioning flow.

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

• A. Use a HTTP POST to request the refresh token for the current user.
• B. Enable Single Logout with a secure logout URL.
• C. Use a HTTP POST to make a call to the revoke token endpoint.
• D. Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.