Given a scenario, troubleshoot common points of failure that may be encountered in a Single Sign-on solution (SAML, OAuth, etc.).
Identity And Access Management
Understand how Salesforce handles authentication and authorization using SSO, OAuth, Delegated Authentication, and Permission Sets.
Given a scenario, recommend the Salesforce technologies that should be used to provide identity to the third-party system (Canvas, Connected Apps, App Launcher, etc.).
Given a scenario, recommend the most appropriate Salesforce license type(s) to support the identity requirements.
Given a scenario, recommend the appropriate method of SAML initiation to fulfill the requirements (SP-init, IdP-init.).
Given a scenario, recommend the appropriate method for provisioning users in Salesforce and other third-party services (SOAP/REST API, SAML JIT, Identity Connect, User Provisioning for Connected Apps, etc.).
Given a scenario, identify the risks and mitigation strategies that session security and Two-Factor Authentication enable (E.g. High Assurance Sessions, 2FA, etc.).
Given a scenario, determine the most appropriate Two-Factor Authentication mechanism for an identity solution.
Given a scenario, determine the most appropriate flow type to recommend when implementing an OAuth solution where Salesforce is providing identity to a third party (for example, User Agent, Web Server, JWT, etc.)
Given a scenario, articulate whether it describes an authentication, authorization, or accounting scenario and what Salesforce feature should be used to accomplish the task
Describe the various implementation concepts of OAuth (for example; scopes, secrets, tokens, refresh tokens, token expiration, token revocation, etc.).
Describe the role(s) Identity Connect plays in an Identity Management solution.
Describe the role(s) Connected Apps play when Salesforce needs to provide identity to a third-party system.
Describe the role(s) an Identity Provider and Service Provider play in an access control solution
Describe the risks to enterprise security that federated Single Sign-on solutions aim to address.
Describe the risks that Two-Factor Authentication mechanisms aim to mitigate.
Describe the components of an identity management solution where Salesforce is accepting identity from a third party
Describe the components of a Delegated Authentication solution.
Describe the capabilities for customizing the registration experience for external communities (for example; Branding options, self-registration, communications, etc.).