Certified Identity and Access Management Designer

By Salesforce · Question Mode

QuestionQ12

VerifiedSalesforce Identity

Universal Containers has adopted a multi-org strategy and wants to centralize management of its Salesforce user profiles.

What should the Architect recommend to enable Salesforce profiles to be managed from a central system of record?

Explanation

SAML Just-in-Time provisioning enables the identity provider to supply user attributes in each SAML assertion and automatically create or update Salesforce user accounts. ProfileId is a required JIT user field; because profile IDs vary by org, Salesforce also supports passing the profile name in the ProfileId field. This allows the centralized identity system to control profile assignment for each org.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!