Salesforce Identity12% of the exam

Choosing internal, identity and Experience Cloud licenses

How to pick a user license from requirements: internal versus external, Identity Only, Salesforce Platform and Salesforce Integration for employees and systems, and External Identity, Customer Community, Customer Community Plus, Partner Community, Channel Account and External Apps for external users, with member-based versus login-based pricing, person-account fit and scale guidance.

Official exam objective
Give a set of requirements, recommend the most appropriate Salesforce license type(s).

~7 min read · 17 practice questions ·

What the exam expects

  • Decide internal versus external from who the user is and what privileges they need, not from whether they are on the payroll.
  • Choose among Identity Only, Salesforce Platform and Salesforce Integration for employees and systems, including Identity Only's complimentary count, edition limits and custom-object limit.
  • Choose among External Identity, Customer Community, Customer Community Plus, Partner Community, Channel Account and External Apps from the objects, sharing, person-account model and scale the requirement implies.
  • Choose member-based or login-based licenses from login frequency, and count daily unique logins.

Key terms: internal license (for employees or anyone treated as one; logs in through login.salesforce.com or My Domain); external license (Experience Cloud sites only); Identity Only (employee license for identity services such as SSO); login-based license (a pool of monthly logins, one per user per day); Channel Account (partner license counted per partner account).

Key facts

Consultants who administer the org
Detail
Internal license
External users
Detail
Only sites they're members of; no internal org
Complimentary Identity Only
Detail
100 in Professional, Enterprise, Unlimited, Performance
Identity Only in Professional Edition
Detail
SAML SSO only as service provider
Identity Only custom objects
Detail
10, contractual
Salesforce Integration
Detail
API only; no user interface
Leads and opportunities
Detail
Partner Community and Channel Account only
Channel Account
Detail
Up to 40 pooled users per partner account
Person accounts
Detail
Not with Partner Community
100+ million users
Detail
Customer Community or External Apps
Login-based usage
Detail
One login per user per day, site switches free
One license per user
Detail
Changing it removes permission sets
Sources for this section (5)
  • Why do consultants who administer the org need internal licenses?
  • When does Channel Account beat Partner Community?
  • Which three Experience Cloud licenses can be used with person accounts?
  • When is a login-based license the better buy?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Platform Identity and Access Management Architect pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 25 lessons of the Platform Identity and Access Management Architect guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Inline practice questions and one-click topic practice (17 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Unlimited timed practice exams

Practice for the Platform Identity and Access Management Architect exam