Salesforce Identity12% of the exam

Customer Identity: headless, passwordless and Customer 360 fit

Where Salesforce Customer Identity (the exam guide's Customer 360 Identity) fits in a Customer 360 architecture: the login, registration, verification and SSO layer for customers and partners, separate from Data 360 profile unification, with headless identity for off-platform apps, passwordless login, SMS verification options and login flows that collect profile data later.

Official exam objective
Given a scenario identify if Salesforce Customer 360 Identity fits into fully a developed Customer 360 solution.

~7 min read · 11 practice questions ·

What the exam expects

  • Decide whether a Customer 360 requirement belongs to Salesforce Customer Identity (customer login, registration, verification, SSO) or to another product such as Data 360 or employee identity.
  • Place an Experience Cloud site in the design: as the login surface, as an identity provider or OpenID provider for other apps, or as the hidden back end of headless identity.
  • Know the scope of headless identity (customers and partners only, site required) and its flows, including user discovery.
  • Choose between free email verification, Salesforce-delivered SMS (Identity Verification Credits) and a custom SMS provider.
  • Collect profile data after registration with a login flow.

Key terms: Salesforce Customer Identity (the exam guide's Customer 360 Identity: IAM for customers and partners); External Identity license (the license that delivers Customer Identity); headless identity (Salesforce authentication behind an off-platform app's own screens); passwordless login (log in and sign up without a username or password); Identity Verification Credits (add-on that buys Salesforce-delivered SMS messages).

Key facts

Customer 360 Identity today
Detail
Salesforce Customer Identity
Licenses that enable it
Detail
External Identity or a Community license
External Identity with paid community licenses
Detail
Free in Enterprise, Performance, Unlimited
Unified profiles
Detail
Data 360 identity resolution
Headless site requirement
Detail
Every implementation needs an Experience Cloud site
Headless audience
Detail
Customers and partners only, never employees
Headless flows
Detail
Login, passwordless, registration, forgot password, guest
User discovery
Detail
Any identifier for login, passwordless, forgot password
Email verification
Detail
Free
Salesforce-sent SMS
Detail
Identity Verification Credits add-on
Site credentials into a third-party app
Detail
Site as SAML IdP or OpenID provider
Sources for this section (6)
  • Why does a standalone app still need an Experience Cloud site for headless identity?
  • When do existing Customer Community users need a separate External Identity purchase for Customer Identity features?
  • Which tool asks for the remaining profile fields after a short sign-up?
  • Why is a request to unify banking and web analytics records not a Customer Identity requirement?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Platform Identity and Access Management Architect pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 25 lessons of the Platform Identity and Access Management Architect guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Inline practice questions and one-click topic practice (11 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Unlimited timed practice exams

Practice for the Platform Identity and Access Management Architect exam