Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community.
What portion of the authentication provider setup associates a Facebook user with a salesforce user?

  1. Consumer key and consumer secret
  2. Federation ID
  3. User info endpoint URL
  4. Apex registration handler

Answer(s): D



Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users.

How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?

  1. Build an integration that performs a remote call-in to the Salesforce SOAP or REST API.
  2. Use a login flow to query the helpdesk to validate user status.
  3. Have the helpdesk initiate an IdP-initiated Just-m-Time provisioning SecurityAssertion Markup Language flow.
  4. Use Salesforce Connect to integrate with the helpdesk application.

Answer(s): B



A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token mustbe invalidated.

Which action will accomplish this?

  1. Use a HTTP POST to request the refresh token for the current user.
  2. Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.
  3. Use a HTTPPOST to make a call to the revoke token endpoint.
  4. Enable Single Logout with a secure logout URL.

Answer(s): C



A division of a Northern Trail Outfitters (NTO) purchased Salesforce. NTO uses a third party identity provider (IdP) to validate user credentials against Its corporate Lightweight Directory Access Protocol (LDAP) directory. NTO wants to help employees remember as passwords as possible.

What should an identity architect recommend?

  1. Setup Salesforce as a Service Provider to the existing IdP.
  2. Setup Salesforce as an IdP to authenticate against the LDAP directory.
  3. Use Salesforce connect to synchronize LDAP passwords to Salesforce.
  4. Setup Salesforce as an Authentication Provider to the existing IdP.

Answer(s): A



Universal Containers (UC) is using its production org as the identity provider for a new Experience Cloud site and the identity architect is deciding which login experience to use for the site.

Which two page types are valid login page types for the site?

Choose 2 answers

  1. Experience Builder Page
  2. lightning Experience Page
  3. Login Discovery Page
  4. Embedded Login Page

Answer(s): C,D



Viewing page 17 of 48
Viewing questions 81 - 85 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!