Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 3 Question 78 Discussion

Posted by Ligia on Jun 01, 2026 at 09:55 AM

An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.

Which Salesforce OAuth authorization flow should be used?

Suggested Answer: C

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
19 comments · newest first
QU
Queenie 23 days ago
A is straightforward for API security.
CR
Cristy 28 days ago
C doesn’t align with OAuth flows.
GL
Glynda 1 month ago
B has strong security features, though.
EV
Eve 1 month ago
I agree with Lindy. A is the best fit.
JO
Joanna 1 month ago
A covers the SAML requirement perfectly.
CA
Cassi 2 months ago
I’m leaning towards B too. JWT has its advantages.
LA
Lacresha 2 months ago
A is definitely the right choice. It’s designed for this.
ST
Stevie 2 months ago
C seems off. SAML isn't OAuth.
DA
Darnell 2 months ago
I feel B might be better. JWT is secure.
LI
Lindy 2 months ago
I think it's A. SAML Bearer Assertion Flow fits well.
IZ
Izetta 2 months ago
Definitely A) for SAML integration, no doubt about it!
SO
Sommer 3 months ago
Wait, isn't D) OAuth 2.0 User-Agent Flow more common for these cases?
GL
Glenna 3 months ago
C) SAML Assertion Flow sounds like a solid option, but is it really the best?
WI
William 3 months ago
I think B) OAuth 2.0 JWT Bearer Flow could work too.
CH
Chaya 3 months ago
A) OAuth 2.0 SAML Bearer Assertion Flow is the right choice!
PE
Peggy 3 months ago
The SAML Assertion Flow sounds familiar, but I thought it was more about authentication rather than authorization for APIs.
EL
Eleonore 4 months ago
I feel like the User-Agent Flow is more for user interactions, so it might not fit this scenario with API security.
CH
Chery 4 months ago
I remember practicing a question about OAuth flows, and the JWT Bearer Flow seemed relevant for server-to-server communication.
HA
Hannah 4 months ago
I think the SAML Bearer Assertion Flow is the right choice since it directly relates to SAML, but I'm not entirely sure.
0/2000 characters

Save Cancel