MENU
Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers
Suggested Answer: B, D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
CL
Claribel
11 months ago
Isn't 'Admin approved users' too restrictive for this app?
JE
Jennifer
11 months ago
I agree with techguy, session timeout is crucial here.
SA
Santos
12 months ago
Wait, can you really have a refresh token last that long? Sounds risky.
GA
Gaston
12 months ago
I think 'All users may self-authorize' is the way to go!
HA
Han
1 year ago
Definitely need to set the Session Timeout to 3 months.
KR
Kris
1 year ago
I recall that for mobile apps, we often want to avoid frequent reauthentication. Setting the refresh token policy correctly seems crucial, but I can't remember if it should be set to expire after 3 months or not.
LE
Lea
1 year ago
I’m a bit confused about the session timeout value. I thought it was supposed to be set to a shorter duration for security reasons, but the question mentions 3 months.
DO
Dominque
1 year ago
I think we practiced a similar question where we had to choose between different permitted user settings. I feel like 'Admin approved users are pre-authorized' might be the right choice here.
CA
Candida
1 year ago
I remember discussing the importance of the refresh token policy in class, but I'm not entirely sure if it should be set to expire after 3 months or if it should allow for longer access.
MA
Maryanne
1 year ago
This is a good opportunity to apply my knowledge of Salesforce Identity and OAuth 2.0. I've got this.
WI
Wilda
1 year ago
I'm confident I know the right answer, but I'll double-check to make sure I'm not missing anything.
JO
Josefa
1 year ago
Okay, the key requirements are no forced API access approval and no reauthentication for 3 months. I'll focus on those.
ED
Edna
1 year ago
Hmm, I'm a bit unsure about the difference between the connected app options. Let me think this through carefully.
ET
Ettie
1 year ago
This question seems straightforward, I think I can handle it.
ST
Stephaine
2 years ago
Okay, let me think this through. A and D, for sure. I mean, who wants to approve API access every time? Not this guy!
FR
Francine
2 years ago
Definitely, it will make the user experience much smoother without constant approvals.
DY
Dylan
2 years ago
That sounds right. Those options should work well for the mobile app.
MI
Millie
2 years ago
D) Set the Refresh Token Policy to expire refresh token after 3 months.
MO
Monroe
2 years ago
A) Set Permitted Users to 'Admin approved users are pre-authorized'.
NA
Nan
2 years ago
Ha, this is a classic case of 'read the question carefully'. A and D, no doubt about it. 3 months, no need to approve, easy peasy!
BE
Berry
2 years ago
Hmm, I'm gonna go with A and C. 3-month session timeout should keep them logged in without the need for re-authentication.
KE
Keshia
2 years ago
C) Set the Session Timeout value to 3 months.
BR
Brandon
2 years ago
A) Set Permitted Users to 'Admin approved users are pre-authorized'.
MA
Mable
2 years ago
Definitely A and D. We don't want users to have to approve API access every time, and 3 months for the refresh token sounds about right.
LA
Lashawn
2 years ago
Exactly, it's important to balance convenience with security measures in place.
GL
Glynda
2 years ago
That makes sense, we want to provide a seamless user experience while maintaining security.
LA
Laurena
2 years ago
Yes, and setting the Refresh Token Policy to expire after 3 months will ensure users do not have to reauthenticate frequently.
RO
Ronald
2 years ago
I agree, setting Permitted Users to 'Admin approved users are pre-authorized' will prevent users from having to approve API access every time.
BR
Brett
2 years ago
Option A and D seem like the right choices here. Admin-approved users and 3-month refresh token policy, that's what the question is asking for.
FL
Flo
2 years ago
Definitely. It's all about balancing security with a good user experience.
VA
Valentin
2 years ago
That's what the question is asking for. It's important to ensure security and user convenience.
SC
Scarlet
2 years ago
Yes, I agree. Admin-approved users and a 3-month refresh token policy make sense.
SE
Selma
2 years ago
I think option A and D are the correct choices.
CE
Ceola
2 years ago
I'm not sure about A. Wouldn't setting Permitted Users to 'All users may self-authorize' be more user-friendly for a mobile app?
DA
Daryl
2 years ago
I agree with Cheryl. Setting Permitted Users to 'Admin approved users are pre-authorized' and Refresh Token Policy to expire after 3 months makes sense.
CH
Cheryl
2 years ago
I think we should choose A and D.