Skip to main content Back CRM Cloud Mastery Sign up Create account

Identity & Access Management

Four front doors and one leaver: Salesforce as service provider and identity provider, SSO, and proving access ended.

  • Advanced
  • 34 lessons
  • 8 modules
  • English

Designed and created by Salesforce Expert

$79
or $249 / year for all access Buy this course

What you'll learn

  • Choose between the authentication flows for a given requirement
  • Configure Salesforce as a service provider and as an identity provider
  • Design identity for external and Experience Cloud users
  • Prove that a leaver's access actually ended, everywhere
  • Assemble and defend a complete identity architecture

Course content

8 sections · 34 lectures

Four front doors and one leaver 3 lectures
  1. 1.1 The login that still worked six months after he left
  2. 1.2 Authentication, authorization, accountability — and telling which one a question is actually about
  3. 1.3 How two systems come to trust each other, and the thing in the middle that expires
Salesforce as the Service Provider 5 lectures
  1. 2.1 Four authentication patterns, and how to tell which one a scenario is describing
  2. 2.2 SAML end to end, and the four things that must match or nobody gets in
  3. 2.3 OpenID Connect, authentication providers, and when to prefer them to SAML
  4. 2.4 Delegated authentication, and the two questions that stop you choosing it
  5. 2.5 Troubleshooting a single sign-on that stopped working at 08:40 on a Monday
Getting the user into the org, and proving they left 5 lectures
  1. 3.1 Just-in-time provisioning, and the three things it will not do for you
  2. 3.2 B2E and B2C are different provisioning problems, and the wrong answer is the same one
  3. 3.3 SCIM, connected-app user provisioning, and the leaver problem in reverse
  4. 3.4H Hands-on: user provisioning on a connected app, end to end
  5. 3.5 Which log answers which question
Salesforce as the Identity Provider 5 lectures
  1. 4.1 Turning the org into an identity provider, and the service providers you now own
  2. 4.2 Choosing an OAuth flow from the scenario rather than from habit
  3. 4.3 Scopes, secrets, tokens and refresh tokens — what each one is, and what leaks
  4. 4.4 Expiry and revocation, and the numbers you look up instead of remembering
  5. 4.5 Giving identity to a third-party system: picking the technology, then defending it
The domain the guide calls Community 6 lectures
  1. 5.1 The domain is called Community and the product is Experience Cloud
  2. 5.2 The user and contact model, and who an external user actually is
  3. 5.3 External identity providers in a site, and the login experience you are allowed to change
  4. 5.4H Hands-on: social sign-on for a site, and the registration handler
  5. 5.5 Embedded login, and when the site should not host the login at all
  6. 5.6 External Identity in a site: the advantages, the limitations, and the licence question
Salesforce Identity as a product 3 lectures
  1. 6.1 Identity Connect, and the on-premises directory that has not gone away
  2. 6.2 Customer 360 Identity, and whether it fits an already-built Customer 360
  3. 6.3 Recommending a licence type without quoting a price
Access management in practice 4 lectures
  1. 7.1 Multi-factor authentication, and the session each method should yield
  2. 7.2 Session security levels, login flows, and raising assurance at the moment it is needed
  3. 7.3 Keeping profiles, roles and permission sets correct through the SSO process
  4. 7.4 The connected-app settings that decide who actually gets in
The whole architecture, and the exam 3 lectures
  1. 8.1 Ravensgate end to end: every identity decision on one page, with the trade-off named
  2. 8.2 Six failures, and the one question that diagnoses each
  3. 8.3 The exam run: six flat domains, 65%, and where you are most likely weakest

Requirements

  • CORE-140 Security, Sharing & Visibility
  • Familiarity with SSO concepts helps

Description

Identity taught from the two questions that matter: how somebody gets in, and how you prove they stopped being able to. Salesforce as the service provider and as the identity provider, the Experience Cloud domain the guide still calls Community, Salesforce Identity as a product, and access management in practice.

It covers the Platform Identity and Access Management Architect blueprint and ends by assembling the whole architecture rather than the individual flows.

Who this course is for

  • Architects and senior administrators responsible for how people get into the org.

Skills you'll practise

Identity and access managementSAMLOAuthSingle sign-onExperience CloudSalesforce Identity

Related reading