Certified Identity and Access Management Designer

By Salesforce · Question Mode

QuestionQ7

VerifiedSalesforce as an Identity Provider

Universal Containers (UC) is developing an integration between Salesforce and a legacy web application by using the Canvas framework. UC’s security team has concluded that a signed request from Salesforce is not a sufficient authentication solution for the third-party app.

Which two options should the Architect consider to authenticate the third-party app using the Canvas framework?

Choose two
Explanation

Canvas supports an OAuth Web Request flow that lets an external Canvas app authenticate with Salesforce and acquire OAuth access tokens. Salesforce can also be configured as a SAML identity provider so an external service provider can authenticate users through SAML SSO. Authentication Providers instead authenticate users into Salesforce through an external provider, and registration handlers handle user provisioning rather than authenticating the external app.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!