An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used?
Suggested Answer: C
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
19 comments · newest first
QU
Queenie
23 days ago
A is straightforward for API security.
CR
Cristy
28 days ago
C doesn’t align with OAuth flows.
GL
Glynda
1 month ago
B has strong security features, though.
EV
Eve
1 month ago
I agree with Lindy. A is the best fit.
JO
Joanna
1 month ago
A covers the SAML requirement perfectly.
CA
Cassi
2 months ago
I’m leaning towards B too. JWT has its advantages.
LA
Lacresha
2 months ago
A is definitely the right choice. It’s designed for this.
ST
Stevie
2 months ago
C seems off. SAML isn't OAuth.
DA
Darnell
2 months ago
I feel B might be better. JWT is secure.
LI
Lindy
2 months ago
I think it's A. SAML Bearer Assertion Flow fits well.
IZ
Izetta
2 months ago
Definitely A) for SAML integration, no doubt about it!
SO
Sommer
3 months ago
Wait, isn't D) OAuth 2.0 User-Agent Flow more common for these cases?
GL
Glenna
3 months ago
C) SAML Assertion Flow sounds like a solid option, but is it really the best?
WI
William
3 months ago
I think B) OAuth 2.0 JWT Bearer Flow could work too.
CH
Chaya
3 months ago
A) OAuth 2.0 SAML Bearer Assertion Flow is the right choice!
PE
Peggy
3 months ago
The SAML Assertion Flow sounds familiar, but I thought it was more about authentication rather than authorization for APIs.
EL
Eleonore
4 months ago
I feel like the User-Agent Flow is more for user interactions, so it might not fit this scenario with API security.
CH
Chery
4 months ago
I remember practicing a question about OAuth flows, and the JWT Bearer Flow seemed relevant for server-to-server communication.
HA
Hannah
4 months ago
I think the SAML Bearer Assertion Flow is the right choice since it directly relates to SAML, but I'm not entirely sure.