Exam Certified Identity and Access Management Designer topic 1 question 16 discussion

https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication.htm&type=5 A: You can use any authentication method as long as you wrap it in a web service that Salesforce can consume C: The web service call passes the username, password, and source IP to your SSO web service implementation, which Salesforce servers then access. The source IP is the address where the login request originated. D: Your SSO web service implementation validates the passed information and returns either true or false.

Confusing to see votes distributed. Anyone has good references to these options?

c : https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication.htm&type=5

Correction ACD : A, yes not only SOAP B, not all IP needs to be whitelisted C, yes needed. said in the doc D, yes E, no : should avoid indirect connection for system admin

SourceID is not used as a method parameter https://help.salesforce.com/s/articleView?id=000382656&type=1

A no, only SOAP (?) B yes, need to saveguard the link C no, what is it ? D yes, returns boolean E yes, handle with profil or permission https://help.salesforce.com/s/articleView?id=sf.sso_delauthentication_configuring.htm&type=5

Given that the method leverages a web service - opening SF IP addresses should not be necessary (b). Delegated Administration is enabled for all leveraging SSO - not just System Administrators (d). This consideration is not specified in the question.