Quality study material gets stale, so ValidVCE treats updates as a service, not an afterthought. A year of free updates keeps your Identity-and-Access-Management-Designer bank aligned with the Salesforce Certified Identity and Access Management Designer exam through 2026, sent to your mailbox automatically.
Salesforce Identity-and-Access-Management-Designer Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Salesforce Identity | 7% | - Connected Apps management - Identity Connect capabilities - My Domain configuration |
| Access Management Best Practices | 15% | - Profiles, permission sets, roles and sharing - Security policy enforcement - Compliance and risk mitigation - License type selection for identity scenarios |
| Accepting Third-Party Identity in Salesforce | 22% | - Delegated authentication implementation - SP-initiated vs IdP-initiated SAML - User provisioning and Just-in-Time provisioning - Authentication mechanisms for external IdPs |
| Community (Partner and Customer) Identity | 5% | - Branding and identity customization - Community authentication options - External user registration and login |
| Salesforce as an Identity Provider | 23% | - OAuth flows (User Agent, Web Server, JWT, etc.) - Multi-factor authentication and High Assurance Sessions - Session security policies - OpenID Connect implementation |
| Identity Management Concepts | 28% | - SSO troubleshooting and failure points - SAML, OAuth, OpenID Connect protocols - Federated SSO risks and mitigations - Identity Provider and Service Provider roles |
Salesforce Certified Identity and Access Management Designer Exam FAQ: Before You Commit
The Identity-and-Access-Management-Designer exam is Salesforce's official certification test — passing it earns the Salesforce Certified Identity and Access Management Designer credential at the Designer level. It demands genuine, working knowledge rather than theory alone, which is why candidates who prepare casually tend to stumble. It also feeds into related credentials such as Salesforce Certified Platform Identity and Access Management Architect, Salesforce Certified Security and Access Management Specialist, extending its value beyond one certificate.
Protection and delivery, both in writing. Delivery: the Identity-and-Access-Management-Designer product reaches your mailbox within one minute of payment; if nothing arrives within 2 hours, check spam and contact support for an immediate resend. Refund: sit the corresponding Identity-and-Access-Management-Designer exam within 60 days of purchase, and if you fail, apply with a scanned enrollment slip and the official Score Report PDF within 2 days after the exam — refunds complete within 7 days. The policy covers the corresponding exam only; attempts within 3 days of purchase, exams never actually taken, free materials, and expired orders are excluded, and the candidate name must match the payer name. Prefer to keep going? Exchange your product for two free exam products of equal value instead — the update service on your original purchase stays active.
Salesforce recommends these training options:
Formal training fills the gaps; the 245 practice questions for the Identity-and-Access-Management-Designer exam from ValidVCE then sharpen them into exam-ready skill.
The Salesforce Certified Identity and Access Management Designer exam costs USD 400 (retake: USD 200, plus applicable taxes) per attempt, with 65% as the passing mark. Fail, and USD 400 (retake: USD 200, plus applicable taxes) is payable again — the price of walking in half-prepared. A practical safeguard: practice with ValidVCE until your timed mock results clear 65% comfortably, then book the Identity-and-Access-Management-Designer exam.
Booking runs through Salesforce's official channels:
Note that delivery of the exam itself is via Online proctored or onsite at Pearson VUE testing centers.
No mandatory prerequisites; recommended: Salesforce Administrator certification, hands-on experience with SSO, OAuth, SAML, and Salesforce security Eligibility requirements come from Salesforce and can be revised, so confirm the current rules on the official exam page: https://developer.salesforce.com/resources2/certification-site/files/SGCertifiedIdentityAndAccessManagementDesigner.pdf before committing to a Salesforce Certified Identity and Access Management Designer registration.
The Salesforce Certified Identity and Access Management Designer exam is organized into 6 knowledge areas, with Community (Partner and Customer) Identity (5%), Salesforce Identity (7%), Accepting Third-Party Identity in Salesforce (22%) among the most significant. Allocate study time to match those weights, and see the outline section above for the complete list.
60 questions in 120 minutes — that is the Salesforce Certified Identity and Access Management Designer exam in numbers. The per-question budget is tight, and hesitation is what eats it. Train the pace deliberately: run full timed simulations in the ValidVCE engine, practice committing to an answer and moving on, and the real Identity-and-Access-Management-Designer exam will feel familiar instead of frantic.
You can — the ValidVCE free demo covers the Salesforce Certified Identity and Access Management Designer material, so download some sample questions and answers first and judge quality yourself. Once you buy, 365 days of free updates are included; after that period, extend the update service at a 50% discount from your member zone.
Salesforce Certified Identity and Access Management Designer Sample Questions:
An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?
- A. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
- B. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
- C. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
- D. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".
Correct Answer: D 🗳️
Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?
- A. Develop a scheduled job that calls out to Facebook on a nightly basis.
- B. Use information in the Signed Request that is received from Facebook.
- C. Use the updateUser() method on the Registration Handler class.
- D. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
Correct Answer: C 🗳️
Universal Containers (UC) uses Global Shipping (GS) as one of their shipping vendors. Regional leads of GS need access to UC's Salesforce instance for reporting damage of goods using Cases. The regional leads also need access to dashboards to keep track of regional shipping KPIs. UC internally uses a third-party cloud analytics tool for capacity planning and UC decided to provide access to this tool to a subset of GS employees. In addition to regional leads, the GS capacity planning team would benefit from access to this tool. To access the analytics tool, UC IT has set up Salesforce as the Identity provider for Internal users and would like to follow the same approach for the GS users as well. What are the most appropriate license types for GS Tregional Leads and the GS Capacity Planners? Choose 2 Answers
- A. Customer Community license for GS Regional Leads and Identity license for GS Capacity Planners.
- B. Customer Community Plus license for GS Regional Leads and Customer Community license for GS Capacity Planners.
- C. Identity Licence for GS Regional Leads and External Identity license for GS capacity Planners.
- D. Customer Community Plus license for GS Regional Leads and External Identity for GS Capacity Planners.
Correct Answer: A,B 🗳️
A company wants to provide its employees with a custom mobile app that accesses Salesforce. Users are required to download the internal native IOS mobile app from corporate intranet on their mobile device. The app allows flexibility to access other Non Salesforce internal applications once users authenticate with Salesforce. The apps self-authorize, and users are permitted to use the apps once they have logged into Salesforce.
How should an identity architect meet the above requirements with the privately distributed mobile app?
- A. Use connected app with OAuth and Security Assertion Markup Language (SAML) to access other Non Salesforce internal apps.
- B. Create a new hybrid mobile app and use the connected app with OAuth to authenticate users for Salesforce and non-Salesforce internal apps.
- C. Configure Mobile App settings in connected app and Salesforce as identity provider for non-Salesforce internal apps.
- D. Use Salesforce as an identity provider (IdP) to access the mobile app and use the external IdP for other non-Salesforce internal apps.
Correct Answer: C 🗳️
Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?
- A. Review the User record and evaluate the login and transaction history.
- B. Download the Login History and evaluate the details of logins performed by the user.
- C. Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
- D. Download the Setup Audit Trail and review all recent activities performed by the user.
Correct Answer: B 🗳️
Viewing page 1 out of 49 pages.
Viewing questions 1-5 out of 245 questions.
1328 Customer Reviews
