Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 68 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 68
Topic #: 5

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take?

AUse Delegated Authentication to call the Twitter login API to authenticate users.

BConfigure an Authentication Provider for LinkedIn Social Media Accounts.

CCreate a Custom Apex Registration Handler to handle new and existing users.

DConfigure SSO Settings For Facebook to serve as a SAML Identity Provider.

Show Suggested Answer

Suggested Answer: B, C

by Alpha at Nov 19, 2025, 05:59 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marylin

2 days ago

C sounds complicated. Custom handlers can be risky.

upvoted 0 times

...

Willodean

7 days ago

A could work too, but Twitter might not be the best for all users.

upvoted 0 times

...

Nathalie

12 days ago

Totally agree with B, LinkedIn is a great choice for professionals!

upvoted 0 times

...

Micaela

17 days ago

Wait, can we really trust social media for authentication? Seems sketchy.

upvoted 0 times

...

Lettie

22 days ago

C could add unnecessary complexity, just stick to the social logins!

upvoted 0 times

...

Bernadine

28 days ago

I think A is a bit risky, not sure about using Twitter for auth.

upvoted 0 times

...

Yvonne

1 month ago

B and D seem like solid options for social logins.

upvoted 0 times

...

Lemuel

1 month ago

"A and C? Really? What is this, the dark ages? B and D all the way, baby!"

upvoted 0 times

...

Dona

2 months ago

"I'd go with B and D. Anything to avoid storing those pesky customer credentials!"

upvoted 0 times

...

Chaya

2 months ago

A and C are the way to go, no doubt. Apex is where it's at!

upvoted 0 times

...

Latrice

2 months ago

B and D for sure. Gotta love that social media authentication!

upvoted 0 times

...

William

2 months ago

A and D are the obvious choices here. Who needs Twitter when you've got Facebook?

upvoted 0 times

...

Lanie

3 months ago

Hmm, I'd go with B and C. Seems like the best way to handle social media logins.

upvoted 0 times

...

Monte

3 months ago

I definitely remember the Custom Apex Registration Handler being mentioned, but I’m not clear on when to use it versus the other options.

upvoted 0 times

...

Hoa

3 months ago

I feel like we practiced a similar question about SSO settings, but I’m uncertain if Facebook as a SAML Identity Provider is the right choice for this scenario.

upvoted 0 times

...

Royce

3 months ago

I think configuring an Authentication Provider for LinkedIn makes sense since it's a professional network, but I can't recall if we covered the specifics of that setup.

upvoted 0 times

...

Flo

3 months ago

I remember we discussed using social media credentials in class, but I'm not sure if Delegated Authentication is the best approach here.

upvoted 0 times

...

Elli

3 months ago

This seems straightforward. Since UC doesn't want to store customer credentials, I'd go with the social media authentication options - configure an Authentication Provider for LinkedIn and use Facebook as a SAML Identity Provider.

upvoted 0 times

...

Mee

4 months ago

I'm confident on this one. The best approach is to use social media authentication, so I'd recommend configuring an Authentication Provider for LinkedIn and creating a Custom Apex Registration Handler to handle new and existing users.

upvoted 0 times

...

Devora

4 months ago

Okay, I've got this. I'd recommend configuring an Authentication Provider for LinkedIn and Facebook to let customers use their existing social media accounts. That way UC doesn't have to store any credentials.

upvoted 0 times

...

Leonida

4 months ago

I think B is a solid choice. LinkedIn is popular for professionals.

upvoted 0 times

...

Eveline

4 months ago

B and D are the way to go. Gotta keep those customer credentials safe!

upvoted 0 times

...

Catarina

5 months ago

D is interesting! Facebook has a huge user base.

upvoted 0 times

...

Gretchen

5 months ago

Hmm, this is tricky. I think the key is to avoid storing customer credentials in Salesforce, so I'd recommend the social media authentication options like LinkedIn and Facebook.

upvoted 0 times

...