Salesforce Identity and Access Management Designer Identity-and-Access-Management-Architect

Why wait for shipping? The moment your order is confirmed, Getcertkey emails the Identity-and-Access-Management-Architect practice questions to your inbox, usually within a minute. You could be working through the 112 questions for the Salesforce Certified Identity and Access Management Architect exam tonight.

Salesforce Identity-and-Access-Management-Architect Exam Overview:

Certification Vendor:	Salesforce
Exam Name:	Salesforce Certified Identity and Access Management Architect
Exam Number:	Identity-and-Access-Management-Architect
Exam Price:	USD 400
Available Languages:	English
Passing Score:	Approximately 67%
Exam Format:	Multiple Choice, Multiple Select
Exam Duration:	105-120
Related Certifications:	Salesforce Certified Application Architect Salesforce Certified Sharing and Visibility Architect Salesforce Certified Platform App Builder Salesforce Certified Identity and Access Management Designer
Certificate Validity Period:	3 years
Real Exam Qty:	60-65
Recommended Training:	Trailhead Identity and Access Management Architect Trailmix Salesforce Identity Basics on Trailhead
Exam Registration:	Salesforce Certification Registration Kryterion Webassessor
Sample Questions:
Exam Way:	Online proctored or onsite testing via Kryterion Webassessor
Pre Condition:	No strict prerequisites required; recommended experience includes Salesforce Administrator knowledge and familiarity with identity and access management concepts.
Official Syllabus URL:	https://trailhead.salesforce.com/credentials/identity-and-access-management-architect

Salesforce Identity-and-Access-Management-Architect Exam Syllabus Topics:

Salesforce Certified Identity and Access Management Architect Exam FAQ: What Candidates Ask Most

What is the Salesforce Identity-and-Access-Management-Architect exam?

The Identity-and-Access-Management-Architect exam is the official Salesforce exam behind the Salesforce Certified Identity and Access Management Architect certification, validating the skills measured by the Salesforce Certified Identity and Access Management Architect credential. It sits at the Expert level of the Salesforce certification program. It also connects to Salesforce Certified Platform App Builder, Salesforce Certified Identity and Access Management Designer, Salesforce Certified Sharing and Visibility Architect, Salesforce Certified Application Architect, so the knowledge you build here carries over to those tracks as well.

How many questions are on the Identity-and-Access-Management-Architect exam, and how much time do I get?

The Identity-and-Access-Management-Architect exam contains 60-65 questions to be completed within 105-120. Before exam day, divide the available time by the question count to work out a comfortable per-question pace, and mark any item that eats into it so you can return later instead of getting stuck. Timed sessions in the Getcertkey test engines make that pacing automatic — run at least two full-length mock exams under the clock so time pressure never becomes the reason you drop points.

What score do I need to pass the Identity-and-Access-Management-Architect exam, and what does it cost?

The passing score for the Identity-and-Access-Management-Architect exam is Approximately 67%, and the official registration fee is USD 400. Retakes are not discounted — every new attempt means paying the full fee again — so it pays to measure yourself before you book. Work through the 112 practice questions on Getcertkey, sit a timed practice test, and schedule your exam only when your scores are consistently comfortable. That simple habit is the cheapest exam strategy there is.

Are there any prerequisites for the Identity-and-Access-Management-Architect exam?

No strict prerequisites required; recommended experience includes Salesforce Administrator knowledge and familiarity with identity and access management concepts. Requirements can change when Salesforce revises its certification program, so confirm the current eligibility rules on the official exam page before you register.

How do I register for the Identity-and-Access-Management-Architect exam?

You can book the Salesforce Certified Identity and Access Management Architect exam through the official registration channels below:

• Salesforce Certification Registration
• Kryterion Webassessor

As for delivery, the exam is offered in the following format: Online proctored or onsite testing via Kryterion Webassessor. Choose the option that suits you best when you book your seat.

What official training is recommended for the Identity-and-Access-Management-Architect exam?

Salesforce recommends the following training resources for the Salesforce Certified Identity and Access Management Architect exam:

• Trailhead Identity and Access Management Architect Trailmix
• Salesforce Identity Basics on Trailhead

Official courses build the foundation; the 112 practice questions from Getcertkey then show you how that knowledge is examined, so the two work best together.

Can I try the Identity-and-Access-Management-Architect practice questions before I buy?

Yes. Getcertkey provides a free Identity-and-Access-Management-Architect PDF demo so you can review the question style and answer quality before purchasing. Every purchase also includes 365 days of free updates — if Salesforce revises the exam during that period, the updated material reaches you at no cost. Once the free-update year ends, you can extend your update service at a 50% discount.

What if I fail the Identity-and-Access-Management-Architect exam, and how is my order delivered?

Every Salesforce Certified Identity and Access Management Architect purchase on Getcertkey is covered by a 100% money-back guarantee with clear conditions: if you take the corresponding exam within 60 days of your purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip and your official score report as a PDF within two days of the exam date; claims are processed within seven days of submission. The guarantee does not apply to exams taken within three days of purchase, to material that was downloaded but never used in an exam attempt, or to free products and expired orders, and the candidate name must match the payer name. If you would rather not take a refund, you can instead exchange your purchase for two free exam preparation products of equal value and keep the update service on your original product.

Delivery is instant: your download is sent to your email within one minute of payment, with no limit on how many computers you may install the material on. If nothing arrives within two hours, check your spam folder and contact customer service for help.

What topics are covered in the Identity-and-Access-Management-Architect exam?

The Salesforce Certified Identity and Access Management Architect exam blueprint is organized into 4 domains. The first three are:

• External Identity and Integration
• Authentication and Authorization
• Salesforce Identity Services

For the complete domain-by-domain breakdown, scroll up to the full exam topics outline above and use it to plan how you distribute your study time.

Salesforce Certified Identity and Access Management Architect Sample Questions:

Question 1

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioning in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

A. Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.
B. Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.
C. Configure Salesforce as a SAML Service Provider, and enable SCIM (System for CrossDomain Identity Management) for provisioning and deprovisioning of users.
D. Configure Salesforce as a SAML service provider, and enable Just-In Time (JIT) provisioning and deprovisioning of users.

Question 2

A manufacturer wants to provide registration for an Internet of Things (IoT) device with limited display input or capabilities.
Which Salesforce OAuth authorization flow should be used?

A. OAuth 2.0 Asset Token Flow
B. OAuth 2.0 User-Agent
C. OAuth 2.0 Device Flow
D. OAuth 2.0 WiT Bearer Flow

Question 3

An identity architect ' s client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.
What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

A. Ensure that the Issuer and Assertion Consumer Service (ACS) URL is properly configured between SP and IDP.
B. Ensure that on the SSO settings page, the " Request Signing Certificate " field has a selfsigned certificate.
C. Ensure that there is an HTTPS connection between IDP and SP.
D. Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Question 4

An Identity architect works for a multinational, multi-brand organization. As they work with the organization to understand their Customer Identity and Access Management requirements, the identity architect learns that the brand experience is different for each of the customer's sub-brands and each of these branded experiences must be carried through the login experience depending on which sub-brand the user is logging into.
Which solution should the architect recommend to support scalability and reduce maintenance costs, if the organization has more than 150 sub-brands?

A. Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the user experience.
B. Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the DAuth and Security Assertion Markup Language (SANL) flows.
C. Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.
D. Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.

Question 5

An administrator created a connected app for a custom web application in Salesforce which needs to be visible as a tile in App Launcher. The tile for the custom web application is missing in the app launcher for all users in Salesforce. The administrator requested assistance from an identity architect to resolve the issue.
Which two reasons are the source of the issue?
Choose 2 answers

A. The connected app is not set in the App menu as "Visible in App Launcher".
B. Obtain scope does not include "openid".
C. Statutes, for the connected app is not set in Connected App settings.
D. Session Policy is set as "High Assurance Session required" for this connected app.

Solutions: