support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. Certified Identity and Access Management Architect

Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 126–130 (page: 27)

Updated On: 10-Feb-2026
Page 27 of 51
PDF with 248 Questions

Universal containers(UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application. How can an architect support fingerprints as a form of identification for salesforce Authentication?

  1. Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
  2. Use Delegated Authentication with callouts to a third-party fingerprint scanning application.
  3. Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.
  4. Use custom login flows with callouts to a third-party fingerprint scanning application.

Answer(s): D



An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community. What portion of the authentication provider setup associates a Facebook user with a salesforce user?

  1. Consumer key and consumer secret
  2. Federation ID
  3. User info endpoint URL
  4. Apex registration handler

Answer(s): D



Which three different attributes can be used to identify the user in a SAML 65> assertion when Salesforce is acting as a Service Provider? Choose 3 answers

  1. Federation ID
  2. Salesforce User ID
  3. User Full Name
  4. User Email Address
  5. Salesforce Username

Answer(s): A,C,D



Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials. How can the Architect meet these requirements?

  1. Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
  2. Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.
  3. Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
  4. Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Answer(s): C



Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforce, Workday, and SAP HAN A. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs. Which two Salesforce license types does UC need for its employees' Choose 2 answers

  1. Company Community and Identity licenses
  2. Identity and Identity Connect licenses
  3. Chatter Only and Identity licenses
  4. Salesforce and Identity Connect licenses

Answer(s): B,D



  PDF
Viewing page 27 of 51
Viewing questions 131 - 135 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!