Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 111–115 (page: 24)

Updated On: 10-Feb-2026

Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app.
Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

  1. Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.
  2. Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
  3. Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
  4. Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Answer(s): A,C



Universal Containers (UC) is planning to deploy a custom mobile app that will allow usersto get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization.
What is the most recommended and secureOAuth scope setting that an Architect should recommend?

  1. Id
  2. Web
  3. Api
  4. Custom_permissions

Answer(s): D



Which two considerations should be made when implementing Delegated Authentication?

Choose 2 answers

  1. The authentication web service can include custom attributes.
  2. It can be used to authenticate API clients and mobile apps.
  3. It requires trusted IP ranges at the User Profile level.
  4. Salesforce servers receive but donot validate a user's credentials.
  5. Just-in-time Provisioning can be configured for new users.

Answer(s): B,E



Which three different attributes can be used to identify the user in a SAML 65> assertion when Salesforce isacting as a Service Provider? Choose 3 answers

  1. Federation ID
  2. Salesforce User ID
  3. User Full Name
  4. User Email Address
  5. Salesforce Username

Answer(s): A,C,D



A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:

1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.

2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.

3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.

3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .

Which two options allow the Identity Architect to fulfillthe requirements?

Choose 2 answers

  1. Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
  2. Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.
  3. Redirect the user to a custom page that allows the user to select an existing social identity for login.
  4. Use the custom registration handler to link social identities to Salesforce identities.

Answer(s): B,D



Viewing page 24 of 48
Viewing questions 116 - 120 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!