Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 71–75 (page: 16)

Updated On: 10-Feb-2026

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new JavaScript code and/or libraries to the application. What implementation should an Architect recommend to UC?

  1. Create a Canvas app and use Signed Requests to authenticate the users.
  2. Rewrite the web application as a set of Visualforce pages and Apex code.
  3. Configure the web application as an item in the Salesforce App Launcher.
  4. Add the web application as a ConnectedApp using OAuth User-Agent flow.

Answer(s): A



Universal containers wants to implement SAML SSO for their internal salesforce users using a thirdparty IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

  1. Neithersp - nor IDP - initiated SSO will work
  2. Either sp - or IDP - initiated SSO will work
  3. IDP - initiated SSO will not work
  4. Sp-Initiated SSO will not work

Answer(s): D



Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

  1. User-Agent Oauth flow
  2. SAML assertion Oauth flow
  3. User-Token Oauth flow
  4. Web server Oauth flow

Answer(s): B



Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

  1. Use the salesforce REST API to sync users from active directory to salesforce
  2. Use an app exchange product to sync users from Active Directory to salesforce.
  3. Use Active Directory Federation Services to sync users from active directory to salesforce.
  4. Use Identity connect to sync users from Active Directory to salesforce

Answer(s): B,D



Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google Apps from within salesforce through App launcher and connected App set up? Choose 2 answers

  1. Google is the identity provider
  2. Salesforce is the identity provider
  3. Google is the service provider
  4. Salesforce is the service provider

Answer(s): D



Viewing page 16 of 51
Viewing questions 76 - 80 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!