Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam Questions

Salesforce Certified Platform Identity and Access Management Architect Exam Objectives

1. 1

   1.0 Identity Management Concepts: (17%)

   • 1.1Describe common authentication patterns and understand the differences between each one.
   • 1.2Describe the building blocks that are part of an identity solution (authentication, authorization, & accountability) and how you enable those building blocks using Salesforce features.
   • 1.3Describe how trust is established between two systems.
   • 1.4Given a scenario, recommend the appropriate method for provisioning users in Salesforce.
   • 1.5Given a scenario, troubleshoot common points of failure that may be encountered in a single sign-on solution (SAML, OAuth, etc.)
2. 2

   2.0 Accepting Third-Party Identity in Salesforce: (21%)

   • 2.1Given a use case, describe when Salesforce is used as a Service Provider.
   • 2.2Given a scenario, recommend the most appropriate way to provision users from identity stores in B2E and B2C scenarios.
   • 2.3Given a scenario, recommend the appropriate authentication mechanism when Salesforce needs to accept 3rd Party Identity (Enterprise Directory, Social, Community, etc.).
   • 2.4Given a scenario, identify the ways that users can be provisioned in Salesforce to enable SSO and apply access rights.
   • 2.5Given a scenario, identify the auditing and monitoring approaches available on the platform, and describe the tools that are available to diagnose IdP issues.
3. 3

   3.0 Salesforce as an Identity Provider: (17%)

   • 3.1Given a scenario, identify the most appropriate OAuth flow (Web based, JWT, User agent, Device auth flow).
   • 3.2Given a scenario, recommend appropriate Scope and Configuration of the connected App for Authorization.
   • 3.3Describe the various implementation concepts of OAuth (scopes, secrets, tokens, refresh tokens, token expiration, token revocation, etc.).
   • 3.4Given a scenario, recommend the Salesforce technologies that should be used to provide identity to the 3rd party system. (Canvas, Connected Apps, App Launcher, etc.).
4. 4

   4.0 Access Management Best Practices: (15%)

   • 4.1Given a set of requirements, determine the most appropriate methods of multi-factor authentication to use, and the right type of session they should yield.
   • 4.2Given a scenario, how should you best assign roles, profiles, and permission sets to a user during the SSO process, how would you keep these assignments up to date.
   • 4.3Given a scenario, describe what tools you can apply to audit and verify the activity/user during and after login.
   • 4.4Given a scenario, identify the configuration settings for a Connected app.
5. 5

   5.0 Salesforce Identity: (12%)

   • 5.1Given a set of requirements, identify the role Identity Connect product plays in a Salesforce Identity implementation.
   • 5.2Given a scenario identify if Salesforce Customer 360 Identity fits into a fully developed Customer 360 solution.
   • 5.3Give a set of requirements, recommend the most appropriate Salesforce license type(s).
6. 6

   6.0 Community (Partner and Customer): (18%)

   • 6.1Describe the capabilities for customizing the user experience for Experience Cloud (Branding options, authentication options, identity verification self-registration, communications, password reset etc.).
   • 6.2Given a set of requirements, determine the best way to support external identity providers in communities and leverage the right user/contact model to support community user experience.
   • 6.3Given a requirement, understand the advantages and limitations of External Identity solutions and associated licenses.
   • 6.4Given a scenario, determine when to use embedded login.