support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 91–95 (page: 20)

Updated On: 10-Feb-2026
Page 20 of 48
PDF with 230 Questions

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process.
Which two considerations should an architect point out to UC? Choose 2 answers

  1. The web application should be hosted on a secure server.
  2. The web server must be able to protect consumer privacy
  3. The flow involves passing the user credentials back and forth.
  4. The flow will not provide an Oauth refresh token back to the server.

Answer(s): A,B



Northern Trail Outfitters (NTO) utilizes a third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login toSalesforce with their third-party portal credentials for a seamless expenence. The third- party employee portal only supports OAuth.

What should an identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?

  1. Configure SSO to use the third party portal as an identity provider.
  2. Create a custom external authentication provider.
  3. Add the third-party portal as a connected app.
  4. Configure Salesforce for Delegated Authentication.

Answer(s): A



How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?

  1. Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.
  2. Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.
  3. Remove the Login page from the list of Authentication Services on the My Domain configuration.
  4. Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.

Answer(s): C



Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from theiraccounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

  1. Configure SAML SSO settings.
  2. Create a Connected App.
  3. Configure Delegated Authentication.
  4. Set up My Domain.

Answer(s): A,D



An Identity architect works for a multinational, multi-brand organization. As they work with the organization to understand their Customer Identity and Access Management requirements, the identity architect learns that the brand experience is different for each of the customer's sub-brands and each of these branded experiences must be carried through the login experience depending on which sub-brand the user is logging into.

Which solution should the architect recommend to support scalability and reduce maintenance costs, if the organization has more than 150 sub-brands?

  1. Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.
  2. Use Audiences to customizethe login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.
  3. Create a community subdomain for each sub-brand and customize the look and feel of the Login page foreach community subdomain to match the brand.
  4. Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the user experience.

Answer(s): A



  PDF
Viewing page 20 of 48
Viewing questions 96 - 100 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!