Salesforce Certified Identity and Access Management Practice

How does Salesforce support identity verification for external users?

1. Through federated authentication and social logins

2. By implementing multi-factor authentication only

3. By limiting access to internal users only

4. Via manual user verification processes

The correct answer is: Through federated authentication and social logins

Salesforce supports identity verification for external users primarily through federated authentication and social logins. This facilitates a seamless and secure experience, allowing users to authenticate using their existing credentials from other trusted identity providers. This approach not only enhances the user experience by reducing password fatigue but also leverages the security measures already implemented by the external identity providers. Federated authentication allows Salesforce to act as a service provider, letting users authenticate through various Identity Providers (IdPs) like Google, Microsoft, and others. Additionally, social logins enable external users to log in using their credentials from social media platforms, which is especially beneficial for applications where ease of access is paramount. Other methods mentioned in the alternatives differ in functionality and applicability. Multi-factor authentication, while crucial for enhancing security, is just one component of identity verification and does not specifically cater to the needs of external users alone. Limiting access to internal users excludes the possibilities of engaging with external users who may need access to certain services. Manual user verification processes can be time-consuming and less scalable compared to automated solutions such as federated authentication, thus making them less effective for managing external user identities efficiently.