Salesforce Identity and Access Management Designer Identity-and-Access-Management-Designer

Not sure a study set is what you need? Download the free Identity-and-Access-Management-Designer demo from Getcertkey and review a sample of the Salesforce Certified Identity and Access Management Designer practice questions before you spend anything — the 2026 edition is ready to try today.

Salesforce Identity-and-Access-Management-Designer Exam Overview:

Certification Vendor:	Salesforce
Exam Name:	Salesforce Certified Identity and Access Management Designer
Exam Number:	Identity-and-Access-Management-Designer
Related Certifications:	Salesforce Certified Identity and Access Management Architect
Real Exam Qty:	60
Certificate Validity Period:	3 years
Exam Format:	Multiple Select, Multiple Choice
Available Languages:	English
Passing Score:	67%
Exam Price:	USD 400
Exam Duration:	120 minutes
Sample Questions:
Exam Way:	Delivered onsite at a testing center or via online proctored exam.
Pre Condition:	Salesforce recommends experience designing and implementing identity and access management solutions; no formal prerequisite exam required.
Official Syllabus URL:	https://trailhead.salesforce.com/en/credentials/identityandaccessmanagementdesigner

Salesforce Identity-and-Access-Management-Designer Exam Syllabus Topics:

Identity-and-Access-Management-Designer Exam FAQs for 2026 Candidates

Which certification does the Identity-and-Access-Management-Designer exam lead to?

The Identity-and-Access-Management-Designer exam is the official Salesforce exam behind the Salesforce Identity and Access Management Designer certification, validating the skills measured by the Salesforce Certified Identity and Access Management Designer credential. It sits at the Designer level of the Salesforce certification program. It also connects to Salesforce Certified Identity and Access Management Architect, so the knowledge you build here carries over to those tracks as well.

How many questions are on the Identity-and-Access-Management-Designer exam, and how much time do I get?

The Identity-and-Access-Management-Designer exam contains 60 questions to be completed within 120 minutes. Before exam day, divide the available time by the question count to work out a comfortable per-question pace, and mark any item that eats into it so you can return later instead of getting stuck. Timed sessions in the Getcertkey test engines make that pacing automatic — run at least two full-length mock exams under the clock so time pressure never becomes the reason you drop points.

What score do I need to pass the Identity-and-Access-Management-Designer exam, and what does it cost?

The passing score for the Identity-and-Access-Management-Designer exam is 67%, and the official registration fee is USD 400. Retakes are not discounted — every new attempt means paying the full fee again — so it pays to measure yourself before you book. Work through the 245 practice questions on Getcertkey, sit a timed practice test, and schedule your exam only when your scores are consistently comfortable. That simple habit is the cheapest exam strategy there is.

Are there any prerequisites for the Identity-and-Access-Management-Designer exam?

Salesforce recommends experience designing and implementing identity and access management solutions; no formal prerequisite exam required. Requirements can change when Salesforce revises its certification program, so confirm the current eligibility rules on the official exam page before you register.

Can I try the Identity-and-Access-Management-Designer practice questions before I buy?

Yes. Getcertkey provides a free Identity-and-Access-Management-Designer PDF demo so you can review the question style and answer quality before purchasing. Every purchase also includes 365 days of free updates — if Salesforce revises the exam during that period, the updated material reaches you at no cost. Once the free-update year ends, you can extend your update service at a 50% discount.

What if I fail the Identity-and-Access-Management-Designer exam, and how is my order delivered?

Every Salesforce Certified Identity and Access Management Designer purchase on Getcertkey is covered by a 100% money-back guarantee with clear conditions: if you take the corresponding exam within 60 days of your purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip and your official score report as a PDF within two days of the exam date; claims are processed within seven days of submission. The guarantee does not apply to exams taken within three days of purchase, to material that was downloaded but never used in an exam attempt, or to free products and expired orders, and the candidate name must match the payer name. If you would rather not take a refund, you can instead exchange your purchase for two free exam preparation products of equal value and keep the update service on your original product.

Delivery is instant: your download is sent to your email within one minute of payment, with no limit on how many computers you may install the material on. If nothing arrives within two hours, check your spam folder and contact customer service for help.

What topics are covered in the Identity-and-Access-Management-Designer exam?

The Salesforce Certified Identity and Access Management Designer exam blueprint is organized into 6 domains. The first three are:

• Community (Partner and Customer) — 18% of the exam
• Accepting Third-Party Identity in Salesforce — 21% of the exam
• Access Management Best Practices — 15% of the exam

For the complete domain-by-domain breakdown, scroll up to the full exam topics outline above and use it to plan how you distribute your study time.

Salesforce Certified Identity and Access Management Designer Sample Questions:

Question #1
Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN.
Which two options should an identity architect recommend to meet the requirement?
Choose 2 answers

A. Configure Cloud Provider Load Balancer
B. Salesforce Identity Connect
C. Salesforce Trigger & Field on Contact Object
D. Active Directory Password Sync Plugin

Question #2
Which three types of attacks would a 2-Factor Authentication solution help garden against?

A. Dictionary attacks
B. Man-in-the-middle attacks
C. Key logging attacks
D. Network perimeter attacks
E. Phishing attacks

Question #3
Universal containers (UC) does my domain enable in the context of a SAML SSO configuration? Choose 2 answers

A. SSO from salesforce1 mobile app.
B. App launcher
C. Login forensics
D. Resource deep linking

Question #4
Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

A. Api
B. Custom_permissions
C. Id
D. Web

Question #5
Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API. Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers

A. full
B. Refresh token
C. API
D. Web

Solutions: