Question

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden.
Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps? Choose 2 answers

a) Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
b) Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
c) Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
d) Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Answer 1

Answer:

b) Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

d) Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Explanation:

When using a third party as identity provider (for creating and managing prinipal identity information and providing authentication service to both Salesforce and Google Apps).

You can also use Salesforce as the identity provider for all users in Universal Containers, while Google Apps will function as a service provider.