IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam Questions and Answers (Page: 10)

QUESTION: 46

Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?

Use the updateUser method on the registration Handler Class.
Develop a scheduled job that calls out to Facebook on a nightly basis.
Use information in the signed Request that is received from facebook.
Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

Answer(s): A

Reveal Solution Next Question

QUESTION: 47

What are three capabilities of Delegated Authentication? Choose 3 answers

It can be assigned by Custom Permissions.
It can connect to SOAP services.
It can be assigned by Permission Sets.
It can be assigned by Profiles.
It can connect to REST services.

Answer(s): B,C,E

Reveal Solution Next Question

QUESTION: 48

In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resource after authentication?

RedirectURL
RelayState
DisplayState
StartURL

Answer(s): B

Reveal Solution Next Question

QUESTION: 49

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

Create a custom application on Heroku that manages the sign-on process from Facebook.
Use JIT Provisioning to automatically create the account in the accounting system.
Add an Apex callout in the registration handler of the authorization provider.
Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Answer(s): C

Reveal Solution Next Question

QUESTION: 50

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

Ensure that users have the same email value in their user records in all of UC's salesforce orgs.
Ensure the same username is allowed in multiple orgs by contacting salesforce support.
Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.

Answer(s): C

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 10) Salesforce Certified Identity and Access Management Architect Updated on: 15-Feb-2026

QUESTION: 46

QUESTION: 47

QUESTION: 48

QUESTION: 49

QUESTION: 50

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 10)
Salesforce Certified Identity and Access Management Architect
Updated on: 15-Feb-2026