Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 66–70 (page: 15)

Updated On: 10-Feb-2026

A company's external application is protected by Salesforce through OAuth. The identity architect for the project needs to limit the level of access to the data of the protected resource in a flexible way.

What should be done to improve security?

  1. Select "Admin approved users are pre-authonzed" and assign specific profiles.
  2. Create custom scopes and assign to the connected app.
  3. Define a permission set that grants access to the app and assign to authorized users.
  4. Leverage external objects and data classification policies.

Answer(s): B





An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:

1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).

Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

  1. A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-Domain Identity Management) for provisioning and deprovisioning of users.
  2. Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning and deprovisioning of users.
  3. Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.
  4. Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.

Answer(s): A



Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portalwhere customers can login using their Google account.

NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.

What should an Identity architect do to fulfill the requirement?

  1. Configure an authentication provider for Social Login using Google and a custom registration handler.
  2. Implement a Just-in-Time handler class that has logic to create cases upon first login.
  3. Create an authentication provider for Social Login using Google and leverage standard registration handler.
  4. Implement a login flow with a record create component for Case.

Answer(s): D



A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:

1) Customer purchases the device.

2) Customer registers the device using their mobile app.

3) A case should automatically be created inSalesforce and associated with the customers account in cases where the device registers issues with tracking.

Which OAuth flow should be used to meet these requirements?

  1. OAuth 2.0 Asset Token Flow
  2. OAuth 2.0 Username-Password Flow
  3. OAuth 2.0 User-Agent Flow
  4. OAuth 2.0 SAML Bearer Assertion Flow

Answer(s): A



Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and corporate identity store.

What type of authentication flow is required to support deep linking'

  1. Web Server OAuth SSO flow
  2. Service-Provider-Initiated SSO
  3. Identity-Provider-initiated SSO
  4. StartURL on Identity Provider

Answer(s): B



Viewing page 15 of 48
Viewing questions 71 - 75 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!