support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 46–50 (page: 11)

Updated On: 10-Feb-2026
Page 11 of 48
PDF with 230 Questions

Universal Containers is implementing a new Experience Cloud site and the identityarchitect wants to use dynamic branding features as of the login process.

Which two options should the identity architect recommend to support dynamic branding for the site?

Choose 2 answers

  1. To use dynamic branding, the community must be built with theVisuaiforce + Salesforce Tabs template.
  2. To use dynamic branding, the community must be built with the Customer Account Portal template.
  3. An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.
  4. An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

Answer(s): B,C



Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the theorgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs.
Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

  1. The Federation ID must be a valid Salesforce Username
  2. The Federation ID must is case sensitive
  3. The Federation ID must be in the form of an email address.
  4. The Federation ID must be populated on the user record.

Answer(s): B,D



Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure.
Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

  1. OAuth Refresh Token FLow
  2. OAuth Username-Password Flow
  3. OAuth SAML Bearer Assertion FLow
  4. OAuth JWT Bearer Token FLow

Answer(s): C,D



UniversalContainers wants to implement SAML SSO for their internal Salesforce users using a third-party IdP. After some evaluation, UC decides not to set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

  1. SP-initiatedSSO will not work.
  2. Neither SP- nor IdP-initiated SSO will work.
  3. Either SP- or IdP-initiated SSO will work.
  4. IdP-initiated SSO will not work.

Answer(s): B



Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.

What should an identityarchitect do to fulfill this requirement?

  1. Contact Salesforce Support and enable delegate single sign-on.
  2. Create a custom external authentication provider.
  3. Use certificate-based authentication.
  4. Configure OpenID Connect authentication provider.

Answer(s): B



  PDF
Viewing page 11 of 48
Viewing questions 51 - 55 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!