Identity & Access Management > Communities > Flashcards

Communities Flashcards

(40 cards)

Study These Flashcards
1
Q

How do you configure SAML for Communities?

A

Use site URL and org id for multiple SAML implementations.

e.g. Recipient=”https://acme.my.site.com/customers/login?so=00DD0000000JsCM”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What OAuth flows are supported for Communities?

A

All flows except Username-Password & SAML assertion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How is the token passed for OAuth flow in Communities?

A

As a bearer token in Authorization Header
e.g.
https://site.force.com/customers/services/data/v32.0/ -H
“Authorization: Bearer
00D50000000IehZ!AQcAQH0dMHZfz972Szmpkb58urFRkgeBGsxL_QJWwYMfAbUeeG7c1E6
LYUfiDUkWe6H34r1AAwOR8B8fLEz6n04NPGRrq0FM”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the authorize url for Communities in an OAuth flow?

A

https://acme.my.site.com/customers/services/oauth2/authorize?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the URL after the app is authorized in an OAUth flow?

A

https://acme.my.site.com/customers/services/oauth2/token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are components of guest user access in Communities?

A

Guest users get a guest user record and profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is external org access set to for Guest Users?

A

Private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are limitations of guest users?

A
  1. Can’t have more than Read Access
  2. Can’t be members of Public Groups or Queues
  3. Can’t get access to records via Manual or Apex Sharing
  4. Can’t have View All or Modify All access to objects
  5. Can’t be owner for new records (goes to default owner) or existing records
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What kind of Community user can a Non-partner or Person Account create?

A

Only Customer Community users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What permission do Salesforce license holders need to create external users?

A

Manage External Users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What permission do Partner & Customer community users need to create external users?

A

Delegated External User Administration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Salesforce do when a user self registers on a community?

A

Creates a Contact & User record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the name of the controller for self registration?

A

CommunitiesSelfRegController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are page options for self registration

A
  1. Default page
  2. Configurable self reg page - can use any identifier (e.g. phone number)
  3. Experience Builder page - can customise look & feel but requires username & password
  4. VF page - full control - can use CommunitiesSelfReg
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the methods you need to use in Apex to create Community users?

A
  1. CreatePortalUser
  2. CreateExternalUser
  3. CreatePersonAccountPortalUser
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What records can be created with JIT provisioning over SAML?

A

User, Contact & Account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

In which part of the SAML assertion is information for JIT provisioning sent?

Study These Flashcards
A

saml:Attribute

18
Q

Where do you enable JIT provisioning in Salesforce

Study These Flashcards
A

Single Sign On settings - ‘User Provisioning Enabled’

19
Q

What are the mandatory values you need to set for JIT provisioning?

Study These Flashcards
A

SAML UserID Type = ‘Federation ID’

SAML Subject NameID = FederationID

20
Q

What are the fields you can send on Account for JIT provisioning?

Study These Flashcards
A
  1. Name (must be unique)
  2. AccountNumber (must be unique)
  3. Owner
21
Q

What are the fields you can send on Contact for JIT provisioning?

Study These Flashcards
A
  1. LastName

2. Email

22
Q

What are the field you can send on User for JIT provisioning?

Study These Flashcards
A
  1. LastName
  2. Email
  3. Username
  4. ProfileID
  5. PortalRole
23
Q

What is the process sequence for JIT provisioning?

Study These Flashcards
A
  1. Find user with matching FederationID
  2. Search all contacts for match on email
  3. Search all accounts for match on account name or account number
  4. if no match at any of the steps above, SF creates account, contact & user
24
Q

What are the ways of authenticating into a Community?

Study These Flashcards
A
  1. Salesforce Identity
  2. Social Sign On using OpenID Connect
  3. Federated authentication using SAML
  4. Delegated authentication using Identity Connect
25
What can be branded in Community login pages?
1. Logos 2. Background color 3. Right frame URL content 4. Footer
26
How do dynamic URL's work?
By replacing the {expid} experience ID parameter
27
What is login discovery?
Allows use of other identifiers (such as phone) instead of username in login process. Salesforce requires vertification code sent in the next screen to match
28
Can you use login discovery with allow users to log in directly to the site?
No
29
How do you enable self registration for Person Accounts in a customer community
1. Give access to self registration page to both person and business account record types 2. Under Administration - Login & Registration, make sure Account field is empty
30
What pages can be customised in a Community authentication flow?
1. Login 2. Forgot Password 3. Self Registration 4. Logout
31
What can you customise in the Login process for Communities
1. Controller i.e. logic | 2. VF Page - UI
32
How do you make custom pages and classes available for login configuration in Communities?
1. Go to Workspaces - Administration - Pages 2. Select 'Go to Force.com' 3. Select 'Public Access Settings' 4. Select 'Enabled VisualForce Page Access' 5. Select 'Enabled Apex Classes'
33
For passwordless login, what method do you call to login users without a password?
site.passwordlesslogin
34
For passwordless login, How do you register & de-register users in Apex if Salesforce is handling the verification?
UserManagement.registerVerificationMethod | UserManagement.deregisterVerificationMethod
35
For passwordless login, what are the methods available if you are handling the full verification process?
1. initSelfRegistration and verifySelfRegistration 2. initPasswordlessLogin and verifyPasswordlessLogin 3. initRegisterVerificationMethod and verifyRegisterVerificationMethod
36
What are the steps required to enable Embedded Login?
1. Enable cross-domain resource sharing. 2. Create Embedded Login Connected App 3. Enable Embedded Login on Web page 4. Write Login & Logout functions 5. Handle the callback
37
How do you set up CORS in SF?
Setup -> CORS -> New
38
What does CORS do?
Enable cross-origin request by populating the Access-Control-Allow-Origin header
39
What are the 2 types of callback supported for embedded login?
1. Client side - web page that receives the token | 2. Server side - uses web server OAuth flow
40
How can you monitor access into the SF org?
1. Identity → Login History 2. Identity → Identity Verification History 3. Identity → Identity Provider Event Log (where SF is IDP) 4. Mobile Device tracking (UserDevice and UserDeviceApplication objects)
Identity & Access Management
flashcards
Decks in class (8)
# Cards
Brainscape helps you reach your goals faster, through stronger study habits.
© 2026 Bold Learning Solutions. Terms and Conditions