Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers
Suggested Answer: D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
TE
Terrilyn
11 months ago
I thought SAML was for single sign-on, not OAuth flows?
ST
Stevie
11 months ago
A is the way to go, no doubt about it!
WH
Whitley
12 months ago
Wait, can you really use digital certs with OAuth? Sounds tricky.
DA
Darci
12 months ago
I think B could work too, but not the best fit.
MA
Marquetta
1 year ago
Definitely A and C for this scenario!
EL
Elouise
1 year ago
I definitely remember that JWT Bearer Token flow is commonly used for server-to-server communication, so that one seems like a safe bet.
NE
Nell
1 year ago
I'm a bit confused about the Refresh Token flow; I don't recall it being used with digital certificates, so I’m leaning towards the other options.
KR
Kristel
1 year ago
I remember practicing a similar question, and I think the SAML Bearer Assertion flow might also work here, but I need to double-check its compatibility with OAuth.
BU
Bulah
1 year ago
I think the JWT Bearer Token flow could be a good option since it supports digital certificates, but I'm not entirely sure about the second choice.
RO
Ronna
1 year ago
I think the key here is the mention of using digital certificates for authentication. That rules out the Web Service flow, which doesn't use certificates. The JWT Bearer Token flow and the Refresh Token flow both seem like good options that fit the requirements.
RA
Raul
1 year ago
Okay, let's see. The requirement is to connect the recruiting system to Salesforce using OAuth and digital certificates. The JWT Bearer Token flow and the Refresh Token flow both use digital certificates, so those are the two I'll go with.
KE
Keneth
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions using digital certificates for authentication, so I'm wondering if the SAML Bearer Assertion flow might also be a good choice. I'll have to think this through carefully.
GI
Giuseppe
1 year ago
The JWT Bearer Token flow and the Refresh Token flow seem like the most relevant options here. I'm pretty confident those are the two correct answers.
SI
Simona
1 year ago
I'm a little confused by this question. Is the switch zoning also important, or is that not necessary in this case? I want to make sure I don't miss anything crucial in my answer.
ZA
Zana
1 year ago
The JWT Bearer Token flow is the way to go. It's like using a secret handshake to get into the Salesforce party without having to remember a password. Easy peasy!
GL
Glory
2 years ago
Web Service flow? I think the developers at UC need to brush up on their OAuth knowledge. That's not even an OAuth flow!
KA
Kallie
1 year ago
B) Refresh Token flow
LE
Lezlie
1 year ago
A) JWT Bearer Token flow
VI
Vicki
2 years ago
SAML Bearer Assertion flow? Really? That's overkill for a simple Salesforce integration. I'd stick to the JWT option.
SH
Shay
1 year ago
Let's go with JWT and maybe Refresh Token flow for extra security.
AL
Allene
1 year ago
Yeah, JWT Bearer Token flow should be sufficient for connecting to Salesforce.
JA
Jaclyn
1 year ago
I agree, SAML Bearer Assertion flow seems like too much for this scenario.
KA
Kathryn
2 years ago
Hmm, the Refresh Token flow could also work, but I'm not sure if it's the best fit since the requirement is about initial authentication, not token renewal.
RE
Rebbeca
2 years ago
C) SAML Bearer Assertion flow
MA
Maurine
2 years ago
A) JWT Bearer Token flow
EL
Elmer
2 years ago
The JWT Bearer Token flow sounds perfect for this use case. It's secure and allows for direct authentication without the need for user interaction.
AL
Alpha
1 year ago
Valentin: Yes, that could also be considered for meeting the requirement.
CE
Celestine
1 year ago
User 3: What about the Refresh Token flow? Would that work as well?
VA
Valentin
1 year ago
User 2: I agree, it's secure and doesn't require user interaction.
CY
Cyril
2 years ago
User 1: I think the JWT Bearer Token flow is a good option for this.
BE
Beckie
2 years ago
I see where you both are coming from. Using both A) JWT Bearer Token flow and C) SAML Bearer Assertion flow would ensure secure authentication with digital certificates.
DA
Daniela
2 years ago
I agree with Margery. Additionally, I believe C) SAML Bearer Assertion flow should also be considered for the same reason.
MA
Margery
2 years ago
I think A) JWT Bearer Token flow should be considered because it allows for authentication using digital certificates.