support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 116–120 (page: 25)

Updated On: 10-Feb-2026
Page 25 of 48
PDF with 230 Questions

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher.
Which three steps must be completed in salesforce to accomplish the goal?

  1. Associate user profiles with the connected Apps.
  2. Complete my domain and Identity provider setup.
  3. Create connected appsfor the external applications.
  4. Complete single Sign-on settings in security controls.
  5. Create named credentials for each external system.

Answer(s): A,B,C



A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).

When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDCor SAML?

  1. OIDC is more secure than SAML and therefore is the obvious choice.
  2. The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.
  3. If the user has a session on Salesforce, you donot want them to be prompted for a username and password when they login to the SP.
  4. They are equivalent protocols and there is no real reason to choose one over the other.

Answer(s): B



Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store.
What type of Authentication flow is required to support deep linking?

  1. Web server Oauth SSO flow.
  2. Identity-provider-initiated SSO
  3. Service-provider-initiated SSO
  4. StartURL on identity provider

Answer(s): C



Northern Trail Outfitters want to allow its consumer to self-register on it business-to- consumer(B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

  1. Enable access to person and business account record types under Public Access Settings.
  2. Contact Salesforce Support to enable business accounts.
  3. Under Login and Registration settings, ensure that the default account field is empty.
  4. Contact Salesforce Support to enable person accounts.
  5. Set organization-wide default sharing for Contact to Public Read Only.

Answer(s): A,C,D



Uwversal Containers (UC) is building a custom employeehut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.

How should an identity architect configure AWS to authenticate and authorize Salesforce users?

  1. Configure the custom employee app as a connected app.
  2. Configure AWS as an OpenID Connect Provider.
  3. Create a custom external authentication provider.
  4. Develop a custom Auth server in AWS.

Answer(s): B



  PDF
Viewing page 25 of 48
Viewing questions 121 - 125 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!