IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Questions and Answers (Page: 8)

QUESTION: 36

A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: " Failed: Not approved for access." What is the most likely cause of this issue?

The Connected App settings "All users may self-authorize" is enabled.
The Salesforce Administrators have revoked the OAuth authorization.
The Users do not have the correct permission set assigned to them.
The Userof High Assurance sessions are required for the Connected App.

Answer(s): C

Reveal Solution Next Question

QUESTION: 37

Which tool should be used to track login data, such as the average number of logins, who logged in more than the averagenumber of times and who logged in during non-business hours?

Login Inspector
Login History
Login Report
Login Forensics

Answer(s): D

Reveal Solution Next Question

QUESTION: 38

Which three are features of federated Single sign-on solutions? Choose 3 Answers

It establishes trust between Identity Store and Service Provider.
It federates credentials control to authorized applications.
It solves all identity and access management problems.
It improves affiliated applications adoption rates.
It enables quick and easy provisioning and deactivating of users.

Answer(s): A,D,E

Reveal Solution Next Question

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden.
Which two optimal ways can the ITteam provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
Use Salesforce as theIdentity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 40

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO.
What is the optimal Salesforce licence type for all of the UC employees?

Identity Licence.
Salesforce Licence.
External Identity Licence.
Salesforce Platform Licence.

Answer(s): D

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 8)
Salesforce Certified Identity and Access Management Designer
Updated on: 09-Feb-2026

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 8) Salesforce Certified Identity and Access Management Designer Updated on: 09-Feb-2026

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 8)
Salesforce Certified Identity and Access Management Designer
Updated on: 09-Feb-2026