問題文
A new hire logs in through single sign-on for the first time. Just-in-Time provisioning is enabled. What does the platform do with the information in the assertion?
選択肢
- It looks the user up in the org, and if no match is found it sends the assertion back to the identity provider with a request to create the account there first, so that the two directories stay aligned before any record is written on the Salesforce side.
- It queues the login for administrator approval and shows the user a pending message, and the record is created once that approval arrives.
- It ignores the attributes and matches on the subject only, so the attribute statement can be left out of the assertion entirely and the login still lands on an existing record.
- It creates the user record from the attribute statement, so no administrator has to prepare the account in advance.