Accepting Third-Party Identity in Salesforce21% of the exam
B2E and B2C provisioning with self-registration
How to provision employees from a corporate directory and consumers who exist in no directory: SCIM connectors and JIT for B2E, and for B2C self-registration with business or person accounts, the Configurable Self-Reg Page and its handler, the self-registration controller, micro-batching and headless registration.
Given a scenario, recommend the most appropriate way to provision users from identity stores in business-to-employer (B2E) and business-to-consumer (B2C) scenarios.
~7 min read · 11 practice questions ·
What the exam expects
- Choose how to provision employees (B2E) from the directory that already holds them: a SCIM-capable connector or SAML just-in-time (JIT) provisioning.
- Choose how to provision consumers (B2C): self-registration on an Experience Cloud site, an authentication provider with a registration handler, or headless registration for a branded app.
- Pick business accounts or person accounts for self-registered users.
- Configure the Configurable Self-Reg Page and extend its handler; know when to customize
CommunitiesSelfRegControllerand when to batch registrations.
Key terms: B2E (employees whose identity lives in a corporate directory); B2C (consumers who usually exist in no company directory); self-registration (visitors create their own site user); Configurable Self-Reg handler (the generated Apex class behind the Configurable Self-Reg Page); micro-batching (asynchronous, batched self-registration).
Key facts
SCIM
- Detail
- REST create, read, update and disable on SCIM endpoints with an OAuth 2.0 access token
JIT timing
- Detail
- Creates the user the first time they log in with a SAML IdP
Identity Connect
- Detail
- Security updates only; no replacement
Customer Identity licenses
- Detail
- External Identity license or Community license
Person accounts
- Detail
- B2C registrants get one record merging account and contact
Configurable Self-Reg availability
- Detail
- Not available when the login page type is Experience Builder
Verification None
- Detail
- Include Password must be selected, or users can't log in
Custom errors
- Detail
Auth.DiscoveryCustomErrorException; custom label up to 200 characters
Controller override
- Detail
CommunitiesSelfRegControllersettings override Login & Registration
Micro-batching
- Detail
- Asynchronous batches; email with login instructions after success
Headless identity
- Detail
- Requires an Experience Cloud site; customers and partners only
Sources for this section (10)
- Manage Identities with SCIMhelp.salesforce.com (opens in a new tab)
- JIT Provisioning for SAMLhelp.salesforce.com (opens in a new tab)
- Identity Connect Retirementhelp.salesforce.com (opens in a new tab)
- Salesforce Customer Identityhelp.salesforce.com (opens in a new tab)
- Person Accounts for Self-Registrationhelp.salesforce.com (opens in a new tab)
- Configurable Self-Reg Pagehelp.salesforce.com (opens in a new tab)
- Custom Error Messageshelp.salesforce.com (opens in a new tab)
- Self-Registration Apex Controllerhelp.salesforce.com (opens in a new tab)
- High-Volume Self-Registrationhelp.salesforce.com (opens in a new tab)
- Headless Identityhelp.salesforce.com (opens in a new tab)
- Why can't standard SAML JIT replace Identity Connect for deprovisioning?
- When must Include Password be selected on the Configurable Self-Reg Page?
- Which Apex exception customizes the error a refused registrant sees?
- When does a headless registration still need an Experience Cloud site?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Platform Identity and Access Management Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 25 lessons of the Platform Identity and Access Management Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (11 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams