Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 121–125 (page: 26)

Updated On: 10-Feb-2026

Universal containers (UC) does my domain enable in the context of a SAML SSO configuration? Choose 2 answers

  1. Resource deep linking
  2. App launcher
  3. SSO from salesforce1 mobile app.
  4. Login forensics

Answer(s): A,C



Universal containers (UC) would like to enable self - registration for their salesforce partner community users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers

  1. Modify the CommunitiesSelfRegController to assign the profile and account.
  2. Modify the selfregistration trigger to assign profile and account.
  3. Configure registration for communities to use a custom visualforce page.
  4. Configure registration for communities to use a custom apex controller.

Answer(s): A,C



Universal containers (UC) has implemented SAML -based single Sign-on for their salesforce application. UC is using pingfederate as the Identity provider. To access salesforce, Users usually navigate to a bookmarked link to my domain URL. What type of single Sign-on is this?

  1. Sp-Initiated
  2. IDP-initiated with deep linking
  3. IDP-initiated
  4. Web server flow.

Answer(s): A



Universal containers (UC) built a customer Community for customers to buy products, review orders, and manage their accounts. UC has provided three different options for customers to log in to the customer Community: salesforce, Google, and Facebook. Which two role combinations are represented by the systems in the scenario? Choose 2 answers

  1. Google is the service provider and Facebook is the identity provider
  2. Salesforce is the service provider and Google is the identity provider
  3. Facebook is the service provider and salesforce is the identity provider
  4. Salesforce is the service provider and Facebook is the identity provider

Answer(s): B,D



Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

  1. The "Redirect to Identity Provider" option has been selected in the my domain configuration.
  2. The user has not configured the salesforce1 mobile app to use my domain for login
  3. The "Redirect to identity provider" option has not been selected the SAML configuration.
  4. The user has not been granted the "Enable single Sign-on" permission

Answer(s): B



Viewing page 26 of 51
Viewing questions 126 - 130 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!