support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 86–90 (page: 19)

Updated On: 10-Feb-2026
Page 19 of 48
PDF with 230 Questions

Universal Containers want users to be able to log in to the Salesforce mobile app with their ActiveDirectory password. Employees are unable to use mobile VPN.

Which two options should an identity architect recommend to meet the requirement?

Choose 2 answers

  1. Active Directory Password Sync Plugin
  2. Configure Cloud Provider Load Balancer
  3. SalesforceTrigger & Field on Contact Object
  4. Salesforce Identity Connect

Answer(s): A,D



Universal Containers (UC) currently uses Salesforce Sales Cloud and anexternal billing application. Both Salesforce and the billing application are accessed several times a day to manage customers. UC would like to configure single sign-on and leverage Salesforce as the identity provider. Additionally, UC would like the billing application to be accessible from Salesforce. A redirect is acceptable.

Which two Salesforce tools should an identity architect recommend to satisfy the requirements?

Choose 2 answers

  1. salesforce Canvas
  2. Identity Connect
  3. Connected Apps
  4. App Launcher

Answer(s): A,D



Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access tothe portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.

What should a identity architect recommend to create partners?

  1. On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.
  2. Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.
  3. Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.
  4. Allow partners to register through the IdP and create partner users in Salesforce through an API.

Answer(s): B



Ttie executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its serviceproviders in order to create a more seamless user experience.

What should be used and considered before recommending it as a solution on the Salesforce Platform?

  1. OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
  2. Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
  3. Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration isused.
  4. Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

Answer(s): C



UniversalContainers (UC) is using a custom application that will act as the Identity Provider and will generate SAML assertions used to log in to Salesforce. UC is considering including custom parameters in the SAML assertion. These attributes contain sensitive data and are needed to authenticate the users. The assertions are submitted to salesforce via a browser form post. The majority of the users will only be able to access Salesforce via UC's corporate network, but a subset of admins and executives would be allowed access from outside the corporate network on their mobile devices.
Which two methods should an Architect consider to ensure that the sensitive data cannot be tampered with, nor accessible to anyone while in transit?

  1. Use the Identity Provider's certificate to digitally sign and Salesforce's Certificate to encrypt the payload.
  2. Use Salesforce's Certificate to digitally sign the SAML Assertion and a Mobile Device Management client on the users' mobile devices.
  3. Use the Identity provider's certificate to digitally Sign and the Identity provider's certificate to encrypt the payload.
  4. Use a custom login flow to retrieve sensitive data using an Apex callout without including the attributes in the assertion.

Answer(s): A,C



  PDF
Viewing page 19 of 48
Viewing questions 91 - 95 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!