Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Salesforce
Exam Format
Registration
Validity
PLAT-ARCH-203 Exam Topics and Domains
PLAT-ARCH-203 is organized into 6 weighted domains. Expect to work with Connected Apps, Delegated Authentication, Identity Connect, Login History, and more.
Identity Management Concepts
Common Authentication Patterns
Describe common authentication patterns and understand the differences between each one.
Building Blocks of Identity Solutions
Describe the building blocks that are part of an identity solution (authentication, authorization, and accountability) and how you enable those building blocks using Salesforce features.
Establishing Trust Between Systems
Describe how trust is established between two systems.
User Provisioning Methods
Given a scenario, recommend the appropriate method for provisioning users in Salesforce.
Troubleshooting SSO Solutions
Given a scenario, troubleshoot common points of failure that may be encountered in a single sign-on (SSO) solution (SAML, OAuth, etc.).
Accepting Third-Party Identity in Salesforce
Salesforce as a Service Provider
Given a use case, describe when Salesforce is used as a Service Provider (SP).
User Provisioning in B2E and B2C Scenarios
Given a scenario, recommend the most appropriate way to provision users from identity stores in business-to-employer (B2E) and business-to-consumer (B2C) scenarios.
Third-Party Authentication Mechanisms
Given a scenario, recommend the appropriate authentication mechanism when Salesforce needs to accept third-party Identity (Enterprise Directory, Social, Community, etc.).
Provisioning Users for SSO with Access Rights
Given a scenario, identify the ways to provision users in Salesforce to enable SSO and apply access rights.
Auditing, Monitoring, and Diagnosing IdP Issues
Given a scenario, identify the auditing and monitoring approaches available on the platform, and describe the tools available to diagnose Identity Provider (IdP) issues.
Salesforce as an Identity Provider
OAuth Flow Selection
Given a scenario, identify the most appropriate OAuth flow (Web-based, JWT, User agent, Device auth flow).
Connected App Scope and Configuration for Authorization
Given a scenario, recommend appropriate Scope and Configuration of the Connected App for Authorization.
OAuth Implementation Concepts
Describe the various implementation concepts of OAuth (scopes, secrets, tokens, refresh tokens, token expiration, token revocation, etc.).
Salesforce Technologies for Providing Identity
Given a scenario, recommend the Salesforce technologies that should be used to provide identity to the third-party system (Canvas, Connected Apps, App Launcher, etc.).
Access Management Best Practices
Multi-Factor Authentication (MFA) Methods and Sessions
Given a set of requirements, determine the most appropriate methods of multi-factor authentication (MFA) to use, and the right type of session they should yield.
Role, Profile, and Permission Set Assignment During SSO
Given a scenario, determine how to best assign roles, profiles, and permission sets to a user during the SSO process, how to keep these assignments up to date.
Auditing and Verifying User Activity
Given a scenario, describe which tools you can apply to audit and verify the activity/user during and after login.
Connected App Configuration Settings
Given a scenario, identify the configuration settings for a Connected App.
Salesforce Identity
Identity Connect
Given a set of requirements, identify the role Identity Connect plays in a Salesforce Identity implementation.
Salesforce Customer Identity (Customer 360 Identity)
Given a scenario, identify if Salesforce Customer 360 Identity fits into a fully-developed Customer 360 solution.
Salesforce License Types for Identity
Give a set of requirements, recommend the most appropriate Salesforce license type(s).
Community (Partner and Customer)
Customizing Experience Cloud User Experience
Describe the capabilities for customizing the user experience for Experience Cloud (Branding options, authentication options, identity verification self-registration, communications, password reset, etc.).
External IdPs and User/Contact Models in Communities
Given a set of requirements, determine the best way to support external IdPs in communities and leverage the right user/contact model to support community user experience.
External Identity Solutions and Licenses
Given a requirement, understand the advantages and limitations of External Identity solutions and associated licenses.
Embedded Login
Given a scenario, determine when to use embedded login.
How do I earn this certification?
Passing PLAT-ARCH-203 earns the Salesforce Certified Platform Identity and Access Management Architect certification. It sits in the Architect track.
- Sys-Arch-301 - Salesforce Certified System ArchitectRequires this exam (Plat-Arch-203) plus Platform Integration Architect (Plat-Arch-204)
- CTA - Salesforce Certified Technical ArchitectBoard/review-based exam. Highest level of Salesforce Architect certification.
- Plat-Arch-204 - Platform Integration ArchitectRequired alongside this exam for System Architect credential
- Plat-Arch-201 - Platform Data ArchitectComplementary data architecture skills
- Plat-Arch-202 - Platform Development Lifecycle and Deployment ArchitectComplementary deployment and lifecycle management skills
- Plat-Arch-205 - Platform Sharing and Visibility ArchitectComplementary security and access design skills
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for PLAT-ARCH-203 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
- ACTIVE
- Last content update: Summer '23 release alignment
- Salesforce Customer Identity (formerly Customer 360 Identity) Current Covered in Domain 5 (Salesforce Identity) - understanding cross-cloud identity capabilities
- Embedded Login Current Covered in Domain 6 (Community) - important to understand third-party cookie limitations
- Identity Connect Current Covered in Domain 5 (Salesforce Identity) - AD synchronization and SSO
Who should take this exam?
- 1+ years of Identity and Access Management experience on the Salesforce Customer 360 platform
- 2+ years of identity and/or security technology experience