IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Questions and Answers (Page: 9)

QUESTION: 41

Universal containers (UC) does my domain enable in the context of a SAML SSOconfiguration? Choose 2 answers

Resource deep linking
App launcher
SSO from salesforce1 mobile app.
Login forensics

Answer(s): A,C

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless.
What Authorization flow should the Architect recommend?

JWT Bearer Token Flow
Web Server Authentication Flow
User Agent Flow
Username and Password Flow

Answer(s): C

Reveal Solution Next Question

QUESTION: 43

Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groupsshould respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.

Mow should an identity architect ensure the ActiveDirectory groups are reflected correctly when a user accesses Salesforce?

Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.
Use the Apex Just-m-Time handler to query custom SAML attributes and set permissionsets.
Use a login flow to query custom SAML attributes and set permission sets.
Use a login flow to query standard SAML attributes and set permission sets.

Answer(s): B

Reveal Solution Next Question

QUESTION: 44

Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirementbe met?

Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
Use information in the Signed Request that is received from Facebook.
Develop a scheduled job that calls out to Facebook on a nightly basis.
Use the updateUser() method on the Registration Handler class.

Answer(s): D

Reveal Solution Next Question

QUESTION: 45

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce.

How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.
Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.
Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security AssertionMarkup Language flow when clicked.
Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Answer(s): D

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 9)
Salesforce Certified Identity and Access Management Designer
Updated on: 09-Feb-2026

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

QUESTION: 45

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 9) Salesforce Certified Identity and Access Management Designer Updated on: 09-Feb-2026

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

QUESTION: 45

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 9)
Salesforce Certified Identity and Access Management Designer
Updated on: 09-Feb-2026