問題文
A site should let visitors log in with credentials from an external provider. In this configuration, what is the site's role?
選択肢
- The site is both provider and consumer at once, issuing an assertion to itself and then validating that assertion before the visitor sees a page.
- The site has no role, because authentication happens entirely outside Salesforce, and the visitor arrives with a session that the provider has already created.
- The site is the identity provider, and the visitor's user record lives in the org and the party that stores the record is the one that authenticates, which is why the external provider only needs to be registered as a trusted application on the Salesforce side.
- The site is the service provider or relying party, trusting the external provider to authenticate the visitor.