Overview

Salesforce Certified Identity and Access Management Architect Credential by ITCertify ZoneThe Salesforce Certified Identity and Access Management Architect credential is intended for professionals looking to validate their ability to assess identity architectures, design secure and efficient access management solutions on the Customer 360 platform, and communicate technical solutions to both business and technical stakeholders.Skills Required to Pass the ExamTo successfully pass the exam, candidates should be able to:Design identity architectures that integrate multiple platforms and support cross-system authentication.Explain system design considerations, benefits, and provide recommendations for identity architecture.Implement best practices in identity and access management within Salesforce environments.Target Audience: Salesforce Certified Identity and Access Management ArchitectThis credential is suited for individuals who evaluate environments and requirements to create secure, scalable identity management solutions on the Customer 360 platform. Professionals in this role have experience designing and implementing complex identity and access management strategies and can effectively communicate solution trade-offs to both business and technical stakeholders.Required BackgroundExperience:At least 1 year designing and implementing Identity and Access Management solutions within the Salesforce Customer 360 platform.Over 2 years in identity and/or security technologies.Typical Job Roles:Enterprise ArchitectTechnical ArchitectSecurity ArchitectIntegration ArchitectIdentity ArchitectSolution ArchitectKey CompetenciesCandidates should demonstrate the ability to:Differentiate between federated and delegated single sign-on (SSO).Gather requirements and configure delegated authentication and SAML in Salesforce.Understand the differences between Identity Provider (IdP) Initiated SAML and Service Provider (SP) Initiated SAML, and determine their appropriate use cases.Establish trust between IdPs and SPs.Assess identity federation capabilities for specific projects.Comprehend high-level concepts and flows of OAuth, SAML, and OpenID Connect.Implement social sign-on and authentication mechanisms for Salesforce Communities.Troubleshoot common SSO failures in Salesforce.Develop effective SSO strategies to enhance enterprise security.Implement two-factor authentication (2FA) strategies in Salesforce.Utilize login flows effectively.Identify suitable use cases for Identity Connect.Apply user lifecycle management techniques, including automated and just-in-time provisioning.Areas Where Candidates May Need SupportWriting Apex code.Networking and domain management related to Identity.Configuring Salesforce for automated user lifecycle management through user provisioning and Connected Apps.Setting up Salesforce to support social sign-on and registration.Knowledge Not RequiredSpecific IdP technology capabilities outside of Salesforce.Obtaining signed certificates.Exam DetailsFormat: 60 multiple-choice/multiple-select questions, plus up to five non-scored questions.Duration: 120 minutes.Passing Score: 67%.Registration Fee: US$400, plus applicable taxes.Retake Fee: US$200, plus applicable taxes.Delivery Options: Proctored exam administered at a testing center or online.Materials: No reference materials allowed during the exam.Prerequisites: None.Exam OutlineThe Salesforce Identity and Access Management Architect Exam measures a candidate's knowledge and skills in the following areas:Identity Management Concepts: 17%Describe common authentication patterns and their differences.Explain the building blocks of an identity solution and how Salesforce features enable them.Describe how trust is established between systems.Recommend methods for provisioning users in Salesforce.Troubleshoot common SSO failures in solutions like SAML and OAuth.Accepting Third-Party Identity in Salesforce: 21%Identify when Salesforce should act as a Service Provider (SP).Recommend user provisioning methods for B2E and B2C scenarios.Recommend appropriate authentication mechanisms for third-party identity acceptance.Identify ways to provision users in Salesforce for SSO and access rights.Recommend auditing and monitoring approaches and tools for diagnosing IdP issues.Salesforce as an Identity Provider: 17%Identify appropriate OAuth flows based on specific scenarios.Recommend scopes and configurations for Connected Apps.Explain OAuth concepts like tokens, secrets, and expiration.Recommend Salesforce technologies for providing identity to third-party systems.Access Management Best Practices: 15%Determine appropriate multi-factor authentication (MFA) methods and session types.Assign roles, profiles, and permission sets during the SSO process and keep them updated.Apply tools to audit and verify user activity during and after login.Identify configuration settings for Connected Apps.Salesforce Identity: 12%Identify the role of Identity Connect in Salesforce Identity implementations.Assess how Salesforce Customer 360 Identity fits into a broader Customer 360 solution.Recommend appropriate Salesforce license types based on requirements.Community (Partner and Customer): 18%Describe customization capabilities for Experience Cloud (branding, authentication, self-registration, etc.).Determine the best way to support external IdPs in communities and select appropriate user models.Understand the advantages and limitations of External Identity solutions and licenses.Identify when to use embedded login.Who this course is for:This course is for Salesforce professionals focusing on identity and access management. It is suited for architects, developers, and IT administrators working on secure authentication, user provisioning, and single sign-on in Salesforce. This course also supports those preparing for the Salesforce Certified Identity and Access Management Architect exam, offering the knowledge and skills necessary to succeed. The practice tests are structured to help participants pass the exam confidently on their first attempt.

Skills

Reviews