|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/salesforce-identity-access-management/
课程评论：没有评论
课程名称：Salesforce身份访问管理 - SP22 课程概述： Salesforce认证身份与访问管理凭证旨在帮助身份专业人士展示他们在评估身份架构、设计安全高效的访问管理解决方案方面的知识、技能和能力。学习者将能够在Customer 360平台上有效地与业务和技术利益相关者沟通技术解决方案。为了顺利通过考试，身份专业人士应具备以下能力： - 设计一个可能跨多个平台的身份架构，并包括系统之间的集成和认证。 - 清晰表述系统设计的考虑因素、优点和身份架构的建议。 - 将一般身份和访问管理最佳实践应用于Salesforce实施。 Salesforce认证身份与访问管理架构师需要评估环境和要求，以设计安全和可扩展的身份管理解决方案。该架构师应在设计和实施复杂的身份和访问管理策略方面具有经验，并能向业务和技术利益相关者有效传达解决方案及其设计权衡。 资格要求： - 在Salesforce Customer 360平台上有1年以上设计和实施身份与访问管理解决方案的经验。 - 拥有2年以上身份和/或安全技术经验。 典型职位角色包括： - 企业架构师 - 技术架构师 - 安全架构师 - 集成架构师 - 身份架构师 - 解决方案架构师 候选人应掌握的技能和知识包括： - 理解联邦和委托单点登录的区别。 - 收集需求并配置Salesforce中的委托认证。 - 收集需求并在Salesforce中配置SAML。 - 理解身份提供者启动的SAML与服务提供者启动的SAML的区别及适用场景。 - 确定身份提供者与服务提供者之间如何建立信任。 - 解释OAuth、SAML和OpenID Connect的高级概念及流程。 - 解释Salesforce中的社交登录。 - 识别社区的身份验证机制。 - 识别并解决Salesforce中单点登录的常见故障原因。 - 理解为何稳健的单点登录策略对企业安全至关重要。 - 了解双因素认证的重要性及其在Salesforce中的实施策略。 - 解释登录流程的使用。 - 确定身份连接的适用用例。 - 确定适当的用户生命周期管理技术，如自动用户配置、及时配置、手动账户创建等。 候选人可能需要的帮助包括： - 编写APEX代码。 - 网络和域管理与身份的关系。 - 配置Salesforce以通过用户配置和连接应用程序支持自动用户生命周期管理。 - 配置Salesforce以支持社交登录和注册。 考试候选人不需掌握的内容包括： - Salesforce以外的特定身份提供者技术能力。 - 获取签名证书。
The Salesforce Certified Identity and Access Management credential is designed for identity professionals who want to demonstrate their knowledge, skills and capabilities at assessing identity architecture; designing secure, high-performance access management solutions on the Customer 360 platform; communicating technical solutions effectively to business and technical stakeholders.An Identity professional should be able to do the following in order to pass the exam:Design an identity architecture that may span multiple platforms and include integration and authentication across systems.Articulate system design considerations, benefits, and recommendations for identity architecture.Apply general identity and access management best practices to Salesforce implementations.A Salesforce Certified Identity and Access Management Architect assesses the environment and requirements to design secure and scalable identity management solutions on the Customer 360 platform. The architect has experience designing and implementing complex identity and access management strategies; as well as communicating the solution and design trade-offs to business and technical stakeholders alike.The Salesforce Certified Identity and Access Management Architect has the following background:1+ years of experience designing and implementing Identity and Access Management solutions in the Salesforce Customer 360 platform2+ years of identity and/or security technology experienceTypical job roles may include:Enterprise ArchitectTechnical ArchitectSecurity ArchitectIntegration ArchitectIdentity ArchitectSolution ArchitectSalesforce Certified Identity and Access Management Architect candidate has the experience, skills, knowledge, and ability to:Understand the difference between Federated and Delegated Single Sign-onGather requirements and configure delegated authentication in SalesforceGather requirements and configure SAML in SalesforceKnow the difference between Identity Provider Initiated SAML and Service Provider Initiated SAML and when to use eachKnow how trust is established between an Identity Provider and a Service ProviderDetermine the general identity federation capabilities that are available for a given projectExplain high-level concepts and flows of OAuth, SAML, and OpenID Connect.Explain Social Sign-On in the context of SalesforceExplain authentication mechanisms for CommunitiesIdentify the cause and resolve common failure conditions for SSO in SalesforceExplain why a solid SSO strategy is important for enterprise securityKnow why Two Factor Authentication is important and strategies for implementing it in SalesforceExplain the use of Login FlowsDetermine the applicable use cases for Identity ConnectDetermine appropriate user lifecycle management techniques (automated user provisioning, just-in-time provisioning, manual account creation, etc) for a given projectA candidate for this exam will likely need assistance in:Write APEXNetworking and domain management as it relates to IdentityConfigure Salesforce for automated user lifecycle management via user provisioning and Connected Apps (click path)Configure Salesforce to support Social Sign-On and Registration (click path)A candidate for this exam is not expected to know:Specific IDP technology capabilities outside of Salesforce.Obtaining signed certificates
