Salesforce Identity Access Management - SP22

The Salesforce Certified Identity and Access Management Architect credential validates your expertise in designing and implementing robust security solutions within the Salesforce Customer 360 platform. This certification is ideal for identity professionals looking to demonstrate proficiency in identity architecture, access management, and secure authentication strategies.

What you'll learn to do:

• Design Secure Identity Architecture: Develop comprehensive identity architectures spanning multiple platforms, integrating authentication across diverse systems.
• Articulate Design Considerations: Clearly communicate system design considerations, benefits, and recommendations for optimal identity architecture.
• Apply IAM Best Practices: Implement general Identity and Access Management (IAM) best practices within Salesforce implementations.
• Assess Environment & Requirements: Analyze environments and requirements to design scalable and secure identity management solutions on the Customer 360 platform.
• Implement Complex Strategies: Design and implement complex identity and access management strategies.
• Communicate Effectively: Effectively convey solution designs and trade-offs to both business and technical stakeholders.

Who is this certification for?

This certification is geared towards professionals with:

• 1+ years of experience designing and implementing Identity and Access Management (IAM) solutions within the Salesforce Customer 360 platform.
• 2+ years of experience in identity and/or security technology.

Typical Job Roles:

• Enterprise Architect
• Technical Architect
• Security Architect
• Integration Architect
• Identity Architect
• Solution Architect

Key Skills & Knowledge:

Successful candidates will possess the ability to:

• Federated vs. Delegated Single Sign-On (SSO): Understand the distinctions and appropriate use cases for Federated and Delegated SSO.
• Delegated Authentication in Salesforce: Gather requirements and configure delegated authentication.
• SAML Configuration in Salesforce: Gather requirements and configure Security Assertion Markup Language (SAML).
• SAML Initiated Flows: Differentiate between Identity Provider Initiated SAML and Service Provider Initiated SAML.
• Trust Establishment: Understand how trust is established between Identity Providers and Service Providers.
• Identity Federation Capabilities: Explain available identity federation capabilities for projects.
• OAuth, SAML, and OpenID Connect: Explain high-level concepts and flows of these protocols.
• Social Sign-On in Salesforce: Explain Social Sign-On implementation within the Salesforce context.
• Community Authentication: Identify authentication mechanisms for Salesforce Communities.
• SSO Troubleshooting: Diagnose and resolve common SSO failure conditions.
• SSO Importance for Security: Explain the importance of a solid SSO strategy for enterprise security.
• Two-Factor Authentication (2FA): Understand the importance of 2FA and implementation strategies in Salesforce.
• Login Flows: Utilize Login Flows effectively.
• Identity Connect Use Cases: Determine applicable use cases for Identity Connect.
• User Lifecycle Management: Implement appropriate user lifecycle management techniques (automated provisioning, just-in-time provisioning, manual account creation).

Areas for Potential Support:

• APEX Development: Assistance may be needed for APEX development tasks.
• Networking & Domain Management: Support may be required for networking and domain management related to identity.
• User Lifecycle Management Configuration: Configuration of Salesforce for automated user lifecycle management via user provisioning and Connected Apps.
• Social Sign-On & Registration: Configuring Salesforce to support Social Sign-On and Registration.

Note: This exam does not require in-depth knowledge of specific IDP technology capabilities outside of Salesforce or obtaining signed certificates.