All challenges
Identity & SSOArchitect
SSO & Identity for 50k External Users
3 decision points576 grounded questions
The scenario
A company onboards 50k partner users. They must log in once (corporate IdP) and reach both the Experience Cloud portal and a separate downstream app. Accounts must be provisioned automatically on first login and deactivated when the partnership ends. Design the identity architecture.
Constraints to satisfy
- Single sign-on from the partner's corporate IdP.
- Just-in-time provisioning on first login.
- Salesforce must broker identity to a downstream app.
- Deactivation must propagate.
Think through your own design first - data model, timing, failure modes. Then walk the decision points and defend each choice against a worked architecture.