Reading notes is one thing; performing under exam conditions is another. The TorrentExam test engines recreate the pace and pressure of the Identity-and-Access-Management-Designer exam environment with timed practice modes, and the Salesforce Certified Identity and Access Management Designer practice questions give you a full rehearsal before exam day.
Salesforce Identity-and-Access-Management-Designer Exam Overview:
| Certification Vendor: | Salesforce |
|---|---|
| Exam Name: | Salesforce Certified Identity and Access Management Designer |
| Exam Number: | Identity-and-Access-Management-Designer |
| Exam Format: | Multiple-select, Scenario-based, Multiple-choice |
| Exam Price: | USD 400 (retake: USD 200, plus applicable taxes) |
| Related Certifications: | Salesforce Certified Security and Access Management Specialist Salesforce Certified Platform Identity and Access Management Architect |
| Passing Score: | 65% |
| Certificate Validity Period: | 1 year (requires annual maintenance) |
| Real Exam Qty: | 60 |
| Exam Duration: | 120 minutes |
| Available Languages: | English |
| Recommended Training: | Official Exam Guide Trailhead Trailmix: Identity and Access Management |
| Exam Registration: | Pearson VUE Registration Salesforce Certification Portal |
| Sample Questions: |  |
| Exam Way: | Online proctored or onsite at Pearson VUE testing centers |
| Pre Condition: | No mandatory prerequisites; recommended: Salesforce Administrator certification, hands-on experience with SSO, OAuth, SAML, and Salesforce security |
| Official Syllabus URL: | https://developer.salesforce.com/resources2/certification-site/files/SGCertifiedIdentityAndAccessManagementDesigner.pdf |
Salesforce Identity-and-Access-Management-Designer Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Identity Management Concepts | 28% | - Identity Provider and Service Provider roles - SAML, OAuth, OpenID Connect protocols - Federated SSO risks and mitigations - SSO troubleshooting and failure points |
| Topic 2: Access Management Best Practices | 15% | - Security policy enforcement - License type selection for identity scenarios - Compliance and risk mitigation - Profiles, permission sets, roles and sharing |
| Topic 3: Salesforce Identity | 7% | - My Domain configuration - Connected Apps management - Identity Connect capabilities |
| Topic 4: Accepting Third-Party Identity in Salesforce | 22% | - SP-initiated vs IdP-initiated SAML - Authentication mechanisms for external IdPs - Delegated authentication implementation - User provisioning and Just-in-Time provisioning |
| Topic 5: Salesforce as an Identity Provider | 23% | - OAuth flows (User Agent, Web Server, JWT, etc.) - OpenID Connect implementation - Multi-factor authentication and High Assurance Sessions - Session security policies |
| Topic 6: Community (Partner and Customer) Identity | 5% | - External user registration and login - Community authentication options - Branding and identity customization |
Identity-and-Access-Management-Designer Certification Exam — Your Questions, Answered
The Identity-and-Access-Management-Designer exam is the official Salesforce exam behind Salesforce Certified Identity and Access Management Designer — passing it earns you the Salesforce Certified Identity and Access Management Designer certification, a credential positioned at the Designer level. It is built for candidates who want to validate the skills measured by Salesforce Certified Identity and Access Management Designer. Depending on your track, the exam is also linked to the Salesforce Certified Platform Identity and Access Management Architect and Salesforce Certified Security and Access Management Specialist certifications, so one pass can move you toward more than one Salesforce credential.
The Identity-and-Access-Management-Designer exam presents 60 questions to be completed within 120 minutes. That pace leaves little room for second-guessing: read each question carefully on the first pass, flag the ones you want to revisit, and keep moving instead of stalling on a single item. Before exam day, run at least one full timed session in the TorrentExam desktop or online test engine with a comparable question load — a steady rhythm under the clock is a trainable skill, and it is often what separates a pass from a near miss.
To pass the Identity-and-Access-Management-Designer exam you need 65%, and the official registration fee is USD 400 (retake: USD 200, plus applicable taxes). Keep in mind that a failed attempt means paying that fee again in full — retakes are not discounted. Given the cost, self-test before you book: if you can score comfortably above the passing mark on two or three consecutive timed TorrentExam practice tests, your budget is far better spent on the exam itself than on a retake.
No mandatory prerequisites; recommended: Salesforce Administrator certification, hands-on experience with SSO, OAuth, SAML, and Salesforce security Because Salesforce revises its certification programs from time to time, treat this as a starting point rather than the final word. Confirm the current eligibility requirements on the official Salesforce exam page before you register.
Registration for the Identity-and-Access-Management-Designer exam is handled through the official channels below:
Delivery method: Online proctored or onsite at Pearson VUE testing centers — pick the option that suits you best when booking your slot.
Salesforce points Salesforce Certified Identity and Access Management Designer candidates toward the following official courses:
Official courses build the foundation; pairing them with the Identity-and-Access-Management-Designer practice questions from TorrentExam turns that knowledge into exam-day readiness.
Yes. A free PDF demo of the Identity-and-Access-Management-Designer practice questions is available, so you can check the question style and answer quality before spending anything. Every purchase also includes 365 days of free updates — whenever Salesforce adjusts the Salesforce Certified Identity and Access Management Designer blueprint, your material is refreshed at no cost during that period. After the first year, you can extend the update service at a 50% discount from your member zone.
TorrentExam backs your purchase with a 100% Money Back Guarantee. If you take the corresponding exam within 60 days of purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip together with the official Score Report PDF within 2 days of your exam date; approved claims are processed within 7 days. The guarantee applies only to the exam matching your purchase, the candidate name must match the payer name, and it does not cover attempts taken within 3 days of purchase, candidates who downloaded the material but never sat the exam, expired orders, or free materials. If you would rather keep preparing, you can exchange the product for two free exam preparation packages of equal value and keep the update service on your original purchase.
Delivery is instant: your download is available right after payment, and a copy is emailed to you within one minute. If nothing arrives within 2 hours, check your spam folder and contact our support team. There is no limit on the number of computers you can install the software on.
The Salesforce Certified Identity and Access Management Designer syllabus is organized into 6 domains. Among the headline areas are Salesforce Identity (7%), Accepting Third-Party Identity in Salesforce (22%), Access Management Best Practices (15%). Rather than copying every subtopic here, we keep the complete, current outline in the Exam Topics section above — work through it domain by domain with the TorrentExam Identity-and-Access-Management-Designer practice questions so nothing on the blueprint catches you off guard.
Salesforce Certified Identity and Access Management Designer Sample Questions:
Universal containers(UC) has implemented SAML-BASED single Sign-on for their salesforce application and is planning to provide access to salesforce on mobile devices using the salesforce1 mobile app. UC wants to ensure that single Sign-on is used for accessing the salesforce1 mobile app. Which two recommendations should the architect make? Choose 2 answers
- A. Use the existing SAML SSO flow along with Web server flow
- B. Configure the salesforce1 app to use the my domain URL
- C. Configure the embedded Web browser to use my domain URL.
- D. Use the existing SAML SSO flow along with user agent flow.
Correct Answer: B,D 🗳️
Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC?
- A. Add the web application as a ConnectedApp using OAuth User-Agent flow.
- B. Configure the web application as an item in the Salesforce App Launcher.
- C. Rewrite the web application as a set of Visualforce pages and Apex code.
- D. Create a Canvas app and use Signed Requests to authenticate the users.
Correct Answer: D 🗳️
Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portal where customers can login using their Google account.
NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.
What should an Identity architect do to fulfill the requirement?
- A. Implement a Just-in-Time handler class that has logic to create cases upon first login.
- B. Create an authentication provider for Social Login using Google and leverage standard registration handler.
- C. Configure an authentication provider for Social Login using Google and a custom registration handler.
- D. Implement a login flow with a record create component for Case.
Correct Answer: D 🗳️
Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the implementation. What two risks Should the Architect point out? Choose 2 answers
- A. Delegated Authentication is enabled or disabled for the entire Salesforce org.
- B. The web service must reside on a public cloud service, such as Heroku.
- C. Salesforce users will be locked out of Salesforce if the web service goes down.
- D. UC will be required to develop and support a custom SOAP web service.
Correct Answer: C,D 🗳️
Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers
- A. Disallow the use of Single Sign-on for any users of the mobile app.
- B. Set Login IP Ranges to the internal network for all of the app users Profiles.
- C. Require High Assurance sessions in order to use the Connected App.
- D. Use Google Authenticator as an additional part of the login process
Correct Answer: C,D 🗳️
Viewing page 1 out of 49 pages.
Viewing questions 1-5 out of 245 questions.
Doris 
Dora 
Rupert 
Beverly 
Kimberley 
Agatha 
Christine 
Bing 
May 
Tess 
Kevin 
Gregary 
Elaine 
Merle 
Jacqueline 
Norman 
Bradley 
