Salesforce Identity and Access Management Designer Salesforce Certified Identity and Access Management Designer Online Training
Salesforce Identity and Access Management Designer Online Training
The questions for Identity and Access Management Designer were last updated at Dec 09,2025.
- Exam Code: Identity and Access Management Designer
- Exam Name: Salesforce Certified Identity and Access Management Designer
- Certification Provider: Salesforce
- Latest update: Dec 09,2025
A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:
1) Customer purchases the device.
2) Customer registers the device using their mobile app.
3) A case should automatically becreated in Salesforce and associated with the customers account in cases where the device registers issues with tracking.
Which OAuth flow should be used to meet these requirements?
- A . OAuth 2.0 Asset Token Flow
- B . OAuth 2.0 Username-Password Flow
- C . OAuth2.0 User-Agent Flow
- D . OAuth 2.0 SAML Bearer Assertion Flow
How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?
- A . Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.
- B . Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.
- C . Remove the Login page from the list of Authentication Services on the My Domain configuration.
- D . Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.
Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp.
In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers
- A . Configure SAML SSO settings.
- B . Create a Connected App.
- C . Configure Delegated Authentication.
- D . Set up My Domain.
Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideasare posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization .
Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?
- A . Redirect_uri
- B . State
- C . Scope
- D . Callback_uri
In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?
- A . Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
- B . Use of self-signedcertificate leads to higher maintenance for trusted party because they have to act as the trusted CA
- C . Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
- D . Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their trust store.
Universal containers (UC) uses a home-grown employee portal for their employees to collaborate. UC decides to use salesforce ideas to allow the employees to post ideas from the employee portal. When clicking some links in the employee portal, the users should be redirected to salesforce, authenticated, and presented with relevant pages .
What scope should be requested when using the Oauth token to meet this requirement?
- A . Web
- B . Full
- C . API
- D . Visualforce
Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access .
What Oauth feature of Salesforceshould be used to achieve the goal?
- A . Access Tokens
- B . Mobile pins
- C . Refresh Tokens
- D . Scopes
Universal containers (UC) is setting up Delegated Authentication to allow employees to log inusing their corporate credentials. UC’s security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce .
What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?
- A . Include client ID and client secret in the login header callout.
- B . Set up a proxy server for the login service in the DMZ.
- C . Require the use ofSalesforce security Tokens on password.
- D . Enforce mutual Authentication between systems using SSL.
Universal Containers (UC) is planning to deploy a custom mobile app that will allow usersto get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization .
What is the most recommended and secureOAuth scope setting that an Architect should recommend?
- A . Id
- B . Web
- C . Api
- D . Custom_permissions
Universal Containers (UC) has implemented SAML-based Single Sign-On to provide seamless access to its Salesforce Orgs, financial system, and CPQ system. Below is the SSO implementation landscape.
What role combination is represented by the systems in this scenario”
- A . Financial System and CPQ System are the only Service Providers.
- B . Salesforce Org1 and Salesforce Org2 are the only Service Providers.
- C . Salesforce Org1 and Salesforce Org2 are acting as Identity Providers.
- D . Salesforce Org1 and PingFederate are acting as Identity Providers.
Latest Identity and Access Management Designer Dumps Valid Version with 196 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
