support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 56–60 (page: 13)

Updated On: 10-Feb-2026
Page 13 of 48
PDF with 230 Questions

Refer to the exhibit.



Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts.

A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.

NTO wants to make sure it renders login page images dynamically based on the user's brand preference selected in Heroku before Authorization.

what should an identity architect do to fulfill theabove requirements?

  1. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Apex.
  2. Create multiple login screens using Experience Builder and use Login Flows at runtime toroute to different login screens.
  3. Authorize third-party service by sending authorization requests to the community- url/services/oauth2/authorize/cookie_value.
  4. Authorize third-party service by sending authorization requests to the community- url/services/oauth2/authonze/expid_value.

Answer(s): D



A group of users try to access one of universal containers connected apps and receive the following error message : "Failed : Not approved for access". what is most likely to cause of the issue?

  1. The use of high assurance sections are required for the connected App.
  2. The users do not have the correct permission set assigned to them.
  3. The connected App setting "All users may self-authorize" is enabled.
  4. The salesforce administrators gave revoked the Oauth authorization.

Answer(s): B



A consumer products company uses Salesforce to maintain consumer information, including orders. The company implemented a portal solution using Salesforce Experience Cloud for its consumers where the consumers can log in using their credentials. The company is considering allowing users to login with their Facebook or Linkedln credentials.

Once enabled, what role will Salesforce play?

  1. Facebook and Linkedln will be the SPs.
  2. Salesforce will be the service provider (SP).
  3. Salesforce will be the identity provider (IdP).
  4. Facebook and Linkedln will act asthe IdPs and SPs.

Answer(s): B



Users logging into Salesforce are frequently prompted to verify their identity.

The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced.

What should the identity architect recommend to meet the requirement?

  1. Implement 2FA authentication for the Salesforce org.
  2. Set trusted IP ranges for the organization.
  3. Implement an single sign-on for Salesforce using an external identity provider.
  4. Implement multi-factor authentication for the Salesforce org.

Answer(s): B



Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.

Which configuration will meet this requirement?

  1. Create and assign a permission set to all employees that includes "MFA for User Interface Logins."
  2. Create a custom login flowthat enforces MFA and assign it to a permission set. Then assign the permission set to all employees.
  3. Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.
  4. For all employee profiles, set the Session LevelRequired at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.

Answer(s): C



  PDF
Viewing page 13 of 48
Viewing questions 61 - 65 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!