Salesforce dumpspedia pearson Identity-and-access-management-architect New Attempt by Cruz q222 vce pdf

Page: 12 / 17

Exam Name:	Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203)
Exam Code:	Identity-and-Access-Management-Architect Dumps
Vendor:	Salesforce	Certification:	Identity and Access Management Designer
Questions:	243 Q&A's	Shared By:	cruz

Question 48

An administrator created a connected app for a custom wet) application in Salesforce which needs to be visible as a tile in App Launcher The tile for the custom web application is missing in the app launcher for all users in Salesforce. The administrator requested assistance from an identity architect to resolve the issue.

Which two reasons are the source of the issue?

Choose 2 answers

Options:

StartURL for the connected app is not set in Connected App settings.

OAuth scope does not include "openid*.

Session Policy is set as 'High Assurance Session required' for this connected app.

The connected app is not set in the App menu as 'Visible in App Launcher".

Discussion

Question 49

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

Options:

Enable access to person and business account record types under Public Access Settings.

Contact Salesforce Support to enable business accounts.

Under Login and Registration settings, ensure that the default account field isempty.

Contact Salesforce Support to enable person accounts.

Set organization-wide default sharing for Contact to Public Read Only.

Discussion

Question 50

ON NO: 12

A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: " Failed: Not approved for access." What is the most likely cause of this issue?

Options:

The Connected App settings "All users mayself-authorize" is enabled.

The Salesforce Administrators have revoked the OAuth authorization.

The Users do not have the correct permission set assigned to them.

The User of High Assurance sessions are required for the Connected App.

Discussion

Answer:

Explanation:

The underlying mechanisms that the UC Architect must ensure are part of the product are Just-in-Time (JIT) provisioning and deprovisioning. JIT provisioningis a process that creates or updates user accounts in Salesforce when users log in with SAML single sign-on (SSO)6. JIT deprovisioning is a process that disables or deletes user accounts in Salesforce when users are removed from the identity provider (IdP). Both of these processes enable automated provisioning and deprovisioning of users without requiring manual intervention or synchronization. The other options are not valid mechanisms for provisioning and deprovisioning. SOAP API is an application programming interface that allows developers to create, retrieve, update, or delete records in Salesforce. However, SOAP API does not support JIT provisioning ordeprovisioning, and requires custom code to implement. Provisioning API is not a standard term for Salesforce, and there is no such API that supports both provisioning and deprovisioning.

[References: Just-in-Time Provisioning for SAML, [Just-in-Time Deprovisioning], [SOAP API Developer Guide]QUESTION NO: 13, Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp.In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?, A. SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning., B. Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning., C. Provisioning API for both Provisioning and Deprovisioning., D. Just-in-Time (JIT) for both Provisioning and Deprovisioning., Answer: D, Just-in-Time (JIT) provisioning and deprovisioning can be used to create, update, or deactivate users in Salesforce based on the information in the SAML assertion sent by the IdP. This way, the user lifecycle can be managed automatically without the need for a separate provisioning API. Reference: [Salesforce Help: Just-in-Time Provisioning for SAML], , ]

Ayesha

They are study materials that are designed to help students prepare for exams and certification tests. They are basically a collection of questions and answers that are likely to appear on the test.

Ayden Feb 10, 2026

That sounds interesting. Why are they useful? Planning this week, hopefully help me. Can you give me PDF if you have ?

Zayaan

Successfully aced the exam… Thanks a lot for providing amazing Exam Dumps.

Harmony Feb 25, 2026

That's fantastic! I'm glad to hear that their dumps helped you. I also used them and found it accurate.

Georgina

I used Cramkey Dumps to prepare for my recent exam and I have to say, they were a huge help.

Corey Feb 24, 2026

Really? How did they help you? I know these are the same questions appears in exam. I will give my try. But tell me if they also help in some training?

Peyton

Hey guys. Guess what? I passed my exam. Thanks a lot Cramkey, your provided information was relevant and reliable.

Coby Feb 16, 2026

Thanks for sharing your experience. I think I'll give Cramkey a try for my next exam.

Norah

Cramkey is highly recommended.

Zayan Feb 7, 2026

Definitely. If you're looking for a reliable and effective study resource, look no further than Cramkey Dumps. They're simply wonderful!

Question 51

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

Options:

Identity Connect will not support user provisioning in UC's current environment.

Identity Connect will only support Idp-initiated SAML flows in UC'scurrent environment.

Identity Connect will only support SP-initiated SAML flows in UC's current environment.

Identity connect is not compatible with UC's current identity environment.