support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 101–105 (page: 22)

Updated On: 10-Feb-2026
Page 22 of 48
PDF with 230 Questions

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership.
What would be the optimal way to implement SSO?

  1. Use Active Directory with Reverse Proxy as the Identity Provider.
  2. Use Microsoft Access control Service as the Authentication provider.
  3. Use Active Directory Federation Service (ADFS) as the Identity Provider.
  4. Use Salesforce Identity Connect as the Identity Provider.

Answer(s): D



Universal Containers (UC) has an Experience Cloud site (Customer Community) where customers can authenticate and place orders,view the status of orders, etc. UC allows guest checkout.

Mow can a guest register using data previously collected during order placement?

  1. Enable Security Assertion Markup Language Sign-On and use a login flow to collect only order details to retrievecustomer data.
  2. Enable Facebook as an authentication provider and use a registration handler to collect only order details to retrieve customer data.
  3. Use a Connected App Handler Apex Plugin class to collect only order details to retrieve customer data.
  4. Enable self-registration and customize a self-registration page to collect only order details to retrieve customer data.

Answer(s): D



Universal containers(UC) wants to integrate a third-party reward calculation system with salesforce to calculate rewards. Rewards will be calculated on a schedule basis and update back into salesforce. The integration between Salesforce and the reward calculation system needs to be secure.
Which are the recommended best practices for using Oauth flows in this scenario? Choose2 answers

  1. Oauth refresh token flow
  2. Oauth SAML bearer assertion flow
  3. Oauthjwt bearer token flow
  4. Oauth Username-password flow

Answer(s): B,C



A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.

What should an identity architect recommend to configure the requirement with limited changes to the third-party app?

  1. Use a connected app with user provisioning flow.
  2. Create Canvas app in Salesforce for third-party app to provision users.
  3. Redirect users to the third-party app for registration.
  4. Use Salesforce identity with Security Assertion Markup Language (SAML) for provisioning users.

Answer(s): A



Universal containers (UC) uses a home-grown employee portal for their employees to collaborate. UC decides to use salesforce ideas to allow the employees to post ideas from the employee portal. When clicking some links in the employee portal, the users should be redirected to salesforce, authenticated, and presented with relevant pages.
What scope should be requested when using the Oauth token to meet this requirement?

  1. Web
  2. Full
  3. API
  4. Visualforce

Answer(s): A



  PDF
Viewing page 22 of 48
Viewing questions 169 - 176 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!