MENU
An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?
Suggested Answer: A
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
MA
Matthew
12 months ago
C is too broad, we need more specific access settings!
BR
Brendan
12 months ago
B looks good too, but does it really meet all the needs?
JO
Joaquin
12 months ago
I’m not sure about A, isn’t the certificate part a bit complicated?
KE
Kenia
1 year ago
Totally agree, A covers all the requirements!
OL
Olive
1 year ago
Option A seems like the best choice for JWT flow.
JE
Jesusita
1 year ago
I'm a bit confused about the difference between 'Admin Pre-Approved' and 'User may self authorize'. I feel like both could potentially meet the requirements.
DE
Denny
1 year ago
This question feels similar to one we practiced where we had to avoid user interaction for OAuth. I think 'Admin Pre-Approved' is the right choice here.
RO
Ronald
1 year ago
I think enabling the API Scope and Offline Access Scope is definitely required, but I can't recall if 'Admin Pre-Approved' is the only option we should consider.
YA
Yaeko
1 year ago
I remember we discussed the importance of using JWT Bearer Flow for seamless authentication, but I'm not sure if it's necessary for this question.
DE
Devorah
1 year ago
This is a challenging question, but I think I have a strategy for approaching it. I'll start by considering the options related to stakeholder involvement and communication, since those seem like they could be key issues based on the information provided. Then I'll evaluate the other options and try to determine the best three answers.
KR
Kristal
1 year ago
Hmm, this is a tough one. I'm not too familiar with the VMware product lineup, so I'll need to think this through carefully. Maybe I should review the product descriptions more closely to see which one best fits the stated needs.
BO
Bobbye
1 year ago
Okay, let me see. The options mention things like identity verification, code audits, and chatbot providers reading conversations. I'm leaning towards D - the providers may be able to access the user conversations, which would be a major privacy problem.