IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam dumps PDF (Page: 8)

QUESTION: 36

A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: " Failed: Not approved for access." What is the most likely cause of this issue?

The Connected App settings "All users may self-authorize" is enabled.
The Salesforce Administrators have revoked the OAuth authorization.
The Users do not have the correct permission set assigned to them.
The User of High Assurance sessions are required for the Connected App.

Answer(s): C

Reveal Solution Next Question

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.
Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
Provisioning API for both Provisioning and Deprovisioning.
Just-in-Time (JIT) for both Provisioning and Deprovisioning.

Answer(s): D

Reveal Solution Next Question

QUESTION: 38

Under which scenario Web Server flow will be used?

Used for web applications when server-side code needs to interact with APIS.
Used for server-side components when page needs to be rendered.
Used for mobile applications and testing legacy Integrations.
Used for verifying Access protected resources.

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

architect is troubleshooting some SAML-based SSO errors during testing. The Architect confirmed that all of the Salesforce SSO settings are correct. Which two issues outside of the Salesforce SSO settings are most likely contributing to the SSO errors the Architect is encountering? Choose 2 Answers

The Identity Provider is also used to SSO into five other applications.
The clock on the Identity Provider server is twenty minutes behind Salesforce.
The Issuer Certificate from the Identity Provider expired two weeks ago.
The default language for the Identity Provider and Salesforce are Different.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 40

Universal Containers (UC) has a Desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and salesforce should be seamless. What Authorization flow should the Architect recommend?

JWT Bearer Token flow
Web Server Authentication Flow
User Agent Flow
Username and Password Flow

Answer(s): C

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 8)
Salesforce Certified Identity and Access Management Architect
Updated on: 31-Mar-2026

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 8) Salesforce Certified Identity and Access Management Architect Updated on: 31-Mar-2026

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 8)
Salesforce Certified Identity and Access Management Architect
Updated on: 31-Mar-2026