Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 1 Question 47 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 47
Topic #: 1

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

AJWT Bearer Token flow

BRefresh Token flow

CSAML Bearer Assertion flow

DWeb Service flow

Show Suggested Answer

Suggested Answer: D

by Lorenza at Sep 08, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Terrilyn

6 months ago

I thought SAML was for single sign-on, not OAuth flows?

upvoted 0 times

...

Stevie

6 months ago

A is the way to go, no doubt about it!

upvoted 0 times

...

Whitley

7 months ago

Wait, can you really use digital certs with OAuth? Sounds tricky.

upvoted 0 times

...

Darci

7 months ago

I think B could work too, but not the best fit.

upvoted 0 times

...

Marquetta

7 months ago

Definitely A and C for this scenario!

upvoted 0 times

...

Elouise

7 months ago

I definitely remember that JWT Bearer Token flow is commonly used for server-to-server communication, so that one seems like a safe bet.

upvoted 0 times

...

Nell

8 months ago

I'm a bit confused about the Refresh Token flow; I don't recall it being used with digital certificates, so I’m leaning towards the other options.

upvoted 0 times

...

Kristel

8 months ago

I remember practicing a similar question, and I think the SAML Bearer Assertion flow might also work here, but I need to double-check its compatibility with OAuth.

upvoted 0 times

...

Bulah

8 months ago

I think the JWT Bearer Token flow could be a good option since it supports digital certificates, but I'm not entirely sure about the second choice.

upvoted 0 times

...

Ronna

8 months ago

I think the key here is the mention of using digital certificates for authentication. That rules out the Web Service flow, which doesn't use certificates. The JWT Bearer Token flow and the Refresh Token flow both seem like good options that fit the requirements.

upvoted 0 times

...

Raul

8 months ago

Okay, let's see. The requirement is to connect the recruiting system to Salesforce using OAuth and digital certificates. The JWT Bearer Token flow and the Refresh Token flow both use digital certificates, so those are the two I'll go with.

upvoted 0 times

...

Keneth

8 months ago

Hmm, I'm a bit unsure about this one. The question mentions using digital certificates for authentication, so I'm wondering if the SAML Bearer Assertion flow might also be a good choice. I'll have to think this through carefully.

upvoted 0 times

...

Giuseppe

8 months ago

The JWT Bearer Token flow and the Refresh Token flow seem like the most relevant options here. I'm pretty confident those are the two correct answers.

upvoted 0 times

...

Simona

8 months ago

I'm a little confused by this question. Is the switch zoning also important, or is that not necessary in this case? I want to make sure I don't miss anything crucial in my answer.

upvoted 0 times

...

Zana

1 year ago

The JWT Bearer Token flow is the way to go. It's like using a secret handshake to get into the Salesforce party without having to remember a password. Easy peasy!

upvoted 0 times

...

Glory

1 year ago

Web Service flow? I think the developers at UC need to brush up on their OAuth knowledge. That's not even an OAuth flow!

upvoted 0 times

Kallie

12 months ago

B) Refresh Token flow

upvoted 0 times

...

Lezlie

12 months ago

A) JWT Bearer Token flow

upvoted 0 times

...

Vicki

1 year ago

SAML Bearer Assertion flow? Really? That's overkill for a simple Salesforce integration. I'd stick to the JWT option.

upvoted 0 times

Shay

12 months ago

Let's go with JWT and maybe Refresh Token flow for extra security.

upvoted 0 times

...

Allene

1 year ago

Yeah, JWT Bearer Token flow should be sufficient for connecting to Salesforce.

upvoted 0 times

...

Jaclyn

1 year ago

I agree, SAML Bearer Assertion flow seems like too much for this scenario.

upvoted 0 times

...

Kathryn

1 year ago

Hmm, the Refresh Token flow could also work, but I'm not sure if it's the best fit since the requirement is about initial authentication, not token renewal.

upvoted 0 times

Rebbeca

1 year ago

C) SAML Bearer Assertion flow

upvoted 0 times

...

Maurine

1 year ago

A) JWT Bearer Token flow

upvoted 0 times

...

Elmer

1 year ago

The JWT Bearer Token flow sounds perfect for this use case. It's secure and allows for direct authentication without the need for user interaction.

upvoted 0 times

Alpha

1 year ago

Valentin: Yes, that could also be considered for meeting the requirement.

upvoted 0 times

...

Celestine

1 year ago

User 3: What about the Refresh Token flow? Would that work as well?

upvoted 0 times

...

Valentin

1 year ago

User 2: I agree, it's secure and doesn't require user interaction.

upvoted 0 times

...

Cyril

1 year ago

User 1: I think the JWT Bearer Token flow is a good option for this.

upvoted 0 times

...

Beckie

1 year ago

I see where you both are coming from. Using both A) JWT Bearer Token flow and C) SAML Bearer Assertion flow would ensure secure authentication with digital certificates.

upvoted 0 times

...

Daniela

1 year ago

I agree with Margery. Additionally, I believe C) SAML Bearer Assertion flow should also be considered for the same reason.

upvoted 0 times

...

Margery

1 year ago

I think A) JWT Bearer Token flow should be considered because it allows for authentication using digital certificates.

upvoted 0 times

...