Overview

Salesforce Certified Identity and Access Management Architect CredentialThe Salesforce Certified Identity and Access Management Architect credential is intended for professionals who seek to validate their expertise in evaluating identity architectures, designing secure and efficient access management solutions on the Customer 360 platform, and effectively communicating technical solutions to both business and technical stakeholders.Skills Required to Pass the ExamTo pass the exam successfully, candidates must be able to:Design Identity Architectures: Create identity frameworks that integrate multiple platforms and support authentication across various systems.System Design Expertise: Explain design considerations, outline the benefits, and provide recommendations for identity architecture.Implement Best Practices: Apply industry best practices in identity and access management within Salesforce environments.Target AudienceThis credential is ideal for individuals who assess environments and requirements to develop secure, scalable identity management solutions on the Customer 360 platform. Professionals suited for this role have experience in designing and implementing complex identity and access management strategies and can effectively communicate solution trade-offs to both business and technical stakeholders.Required BackgroundExperience:Minimum of 1 year designing and implementing Identity and Access Management solutions within the Salesforce Customer 360 platform.Over 2 years of experience in identity and/or security technologies.Typical Job Roles:Enterprise ArchitectTechnical ArchitectSecurity ArchitectIntegration ArchitectIdentity ArchitectSolution ArchitectKey CompetenciesCandidates should demonstrate the ability to:Single Sign-On (SSO):Differentiate between federated and delegated SSO.Gather requirements and configure delegated authentication and SAML in Salesforce.Understand and apply Identity Provider (IdP) Initiated SAML versus Service Provider (SP) Initiated SAML based on use cases.Trust and Federation:Establish trust between IdPs and SPs.Assess identity federation capabilities for specific projects.Authentication Protocols:Comprehend the high-level concepts and flows of OAuth, SAML, and OpenID Connect.Implement social sign-on and authentication mechanisms for Salesforce Communities.Troubleshooting and Security:Troubleshoot common SSO failures in Salesforce.Develop effective SSO strategies to enhance enterprise security.Implement two-factor authentication (2FA) strategies in Salesforce.Additional Skills:Utilize login flows effectively.Identify suitable use cases for Identity Connect.Apply appropriate user lifecycle management techniques, including automated and just-in-time provisioning.Areas Where Candidates May Need SupportWriting Apex codeNetworking and domain management related to IdentityConfiguring Salesforce for automated user lifecycle management through user provisioning and Connected AppsSetting up Salesforce to support social sign-on and registrationKnowledge Not RequiredSpecific IdP technology capabilities outside of SalesforceObtaining signed certificatesExam DetailsFormat: 60 multiple-choice/multiple-select questions, plus up to five non-scored questionsDuration: 120 minutesPassing Score: 67%Registration Fee: US$400, plus applicable taxesRetake Fee: US$200, plus applicable taxesDelivery Options: Proctored exam administered at a testing center or online with proctoringMaterials: No reference materials allowed during the examPrerequisites: None

Skills

Reviews