Salesforce Certified Identity and Access Management Architect : Identity-and-Access-Management-Architect

Northern Trail Outfitters has implemented OAuth 2.0 for its single sign-on (SSO) solution, allowing users to authenticate and access Salesforce resources using external identity providers. However, some users are reporting intermittent logouts when trying to access Salesforce through SSO.
What can be a potential point of failure that should be considered during troubleshooting?

• A. Insufficient user permissions in Salesforce causing access issues.
• B. Expiration or revocation of the access token issued by the identity provider.
• C. Delays in the network routing between the user's location and the Salesforce servers.
• D. Misconfiguration of the user's device, such as an outdated web browser or disabled JavaScript.

A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for passwordless login.
Which feature should an identity architect recommend to meet the requirements?

• A. Integrate with social websites (Facebook, LinkedIn, Twitter)
• B. Create a custom Lightning Web Component
• C. Use Login Discovery
• D. Use an external Identity Provider

Universal Containers is designing an identity architecture that involves integrating Salesforce with an external directory service. The external directory service will act as the central repository for user authentication and authorization across multiple systems within the organization.
Which approach should be evaluated to establish trust between Salesforce and the external directory service?

• A. Implementing a federated identity solution based on SANL (Security Assertion Markup Language).
• B. Using a shared database table to synchronize user credentials between the two systems.
• C. Enforcing IP-based access restrictions for Salesforce and the external directory service.
• D. Utilizing email-based verification for user authentication across the systems.

Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration that supports the company ' s single signon process to Salesforce.
Which Salesforce OAuth authorization flow should be used?

• A. OAuth 2.0 SAML Bearer Assertion Flow
• B. SAML Assertion Flow
• C. OAuth 2.0 JWT Bearer Flow
• D. OAuth 2.0 User-Agent Flow

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioning in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

• A. Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.
• B. Configure Salesforce as a SAML service provider, and enable Just-In Time (JIT) provisioning and deprovisioning of users.
• C. Configure Salesforce as a SAML Service Provider, and enable SCIM (System for CrossDomain Identity Management) for provisioning and deprovisioning of users.
• D. Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.