Salesforce dumpspedia pearson Identity-and-access-management-architect New Attempt by Cruz q222 vce pdf

Page: 12 / 17

Exam Name:	Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203)
Exam Code:	Identity-and-Access-Management-Architect Dumps
Vendor:	Salesforce	Certification:	Identity and Access Management Designer
Questions:	243 Q&A's	Shared By:	cruz

Question 48

An administrator created a connected app for a custom wet) application in Salesforce which needs to be visible as a tile in App Launcher The tile for the custom web application is missing in the app launcher for all users in Salesforce. The administrator requested assistance from an identity architect to resolve the issue.

Which two reasons are the source of the issue?

Choose 2 answers

Options:

StartURL for the connected app is not set in Connected App settings.

OAuth scope does not include "openid*.

Session Policy is set as 'High Assurance Session required' for this connected app.

The connected app is not set in the App menu as 'Visible in App Launcher".

Discussion

Question 49

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

Options:

Enable access to person and business account record types under Public Access Settings.

Contact Salesforce Support to enable business accounts.

Under Login and Registration settings, ensure that the default account field isempty.

Contact Salesforce Support to enable person accounts.

Set organization-wide default sharing for Contact to Public Read Only.

Discussion

Nylah

I've been looking for good study material for my upcoming certification exam. Need help.

Dolly Oct 2, 2025

Then you should definitely give Cramkey Dumps a try. They have a huge database of questions and answers, making it easy to study and prepare for the exam. And the best part is, you can be sure the information is accurate and relevant.

Ilyas

Definitely. I felt much more confident and prepared because of the Cramkey Dumps. I was able to answer most of the questions with ease and I think that helped me to score well on the exam.

Saoirse Oct 21, 2025

That's amazing. I'm glad you found something that worked for you. Maybe I should try them out for my next exam.

Addison

Want to tell everybody through this platform that I passed my exam with excellent score. All credit goes to Cramkey Exam Dumps.

Libby Oct 3, 2025

That's good to know. I might check it out for my next IT certification exam. Thanks for the info.

Pippa

I was so happy to see that almost all the questions on the exam were exactly what I found in their Dumps.

Anastasia Oct 21, 2025

You are right…It was amazing! The Cramkey Dumps were so comprehensive and well-organized, it made studying for the exam a breeze.

Question 50

ON NO: 12

A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: " Failed: Not approved for access." What is the most likely cause of this issue?

Options:

The Connected App settings "All users mayself-authorize" is enabled.

The Salesforce Administrators have revoked the OAuth authorization.

The Users do not have the correct permission set assigned to them.

The User of High Assurance sessions are required for the Connected App.

Discussion

Answer:

Explanation:

The underlying mechanisms that the UC Architect must ensure are part of the product are Just-in-Time (JIT) provisioning and deprovisioning. JIT provisioningis a process that creates or updates user accounts in Salesforce when users log in with SAML single sign-on (SSO)6. JIT deprovisioning is a process that disables or deletes user accounts in Salesforce when users are removed from the identity provider (IdP). Both of these processes enable automated provisioning and deprovisioning of users without requiring manual intervention or synchronization. The other options are not valid mechanisms for provisioning and deprovisioning. SOAP API is an application programming interface that allows developers to create, retrieve, update, or delete records in Salesforce. However, SOAP API does not support JIT provisioning ordeprovisioning, and requires custom code to implement. Provisioning API is not a standard term for Salesforce, and there is no such API that supports both provisioning and deprovisioning.

[References: Just-in-Time Provisioning for SAML, [Just-in-Time Deprovisioning], [SOAP API Developer Guide]QUESTION NO: 13, Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp.In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?, A. SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning., B. Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning., C. Provisioning API for both Provisioning and Deprovisioning., D. Just-in-Time (JIT) for both Provisioning and Deprovisioning., Answer: D, Just-in-Time (JIT) provisioning and deprovisioning can be used to create, update, or deactivate users in Salesforce based on the information in the SAML assertion sent by the IdP. This way, the user lifecycle can be managed automatically without the need for a separate provisioning API. Reference: [Salesforce Help: Just-in-Time Provisioning for SAML], , ]

Question 51

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

Options:

Identity Connect will not support user provisioning in UC's current environment.

Identity Connect will only support Idp-initiated SAML flows in UC'scurrent environment.

Identity Connect will only support SP-initiated SAML flows in UC's current environment.

Identity connect is not compatible with UC's current identity environment.