Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 9 Discussion

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:1. Users should not have to login every time they use the app.2. The app should be able to make calls to the Salesforce REST API.3. End users should NOT see the OAuth approval page.How should the identity architect configure the Salesforce connected app to meet the requirements?
A) Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to 'Admin Pre-Approved'.
B) Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved'.
C) Enable the Full Access Scope and then set the connected app access settings to 'Admin Pre-Approved'.
D) Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to 'User may self authorize'.

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 9 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam
Question #: 9
Topic #: 5
[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:

1. Users should not have to login every time they use the app.

2. The app should be able to make calls to the Salesforce REST API.

3. End users should NOT see the OAuth approval page.

How should the identity architect configure the Salesforce connected app to meet the requirements?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Carlee at Sep 18, 2022, 08:00 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Matthew
10 months ago
C is too broad, we need more specific access settings!
upvoted 0 times
...
Brendan
10 months ago
B looks good too, but does it really meet all the needs?
upvoted 0 times
...
Joaquin
10 months ago
I’m not sure about A, isn’t the certificate part a bit complicated?
upvoted 0 times
...
Kenia
11 months ago
Totally agree, A covers all the requirements!
upvoted 0 times
...
Olive
11 months ago
Option A seems like the best choice for JWT flow.
upvoted 0 times
...
Jesusita
11 months ago
I'm a bit confused about the difference between 'Admin Pre-Approved' and 'User may self authorize'. I feel like both could potentially meet the requirements.
upvoted 0 times
...
Denny
11 months ago
This question feels similar to one we practiced where we had to avoid user interaction for OAuth. I think 'Admin Pre-Approved' is the right choice here.
upvoted 0 times
...
Ronald
11 months ago
I think enabling the API Scope and Offline Access Scope is definitely required, but I can't recall if 'Admin Pre-Approved' is the only option we should consider.
upvoted 0 times
...
Yaeko
11 months ago
I remember we discussed the importance of using JWT Bearer Flow for seamless authentication, but I'm not sure if it's necessary for this question.
upvoted 0 times
...
Devorah
11 months ago
This is a challenging question, but I think I have a strategy for approaching it. I'll start by considering the options related to stakeholder involvement and communication, since those seem like they could be key issues based on the information provided. Then I'll evaluate the other options and try to determine the best three answers.
upvoted 0 times
...
Kristal
11 months ago
Hmm, this is a tough one. I'm not too familiar with the VMware product lineup, so I'll need to think this through carefully. Maybe I should review the product descriptions more closely to see which one best fits the stated needs.
upvoted 0 times
...
Bobbye
11 months ago
Okay, let me see. The options mention things like identity verification, code audits, and chatbot providers reading conversations. I'm leaning towards D - the providers may be able to access the user conversations, which would be a major privacy problem.
upvoted 0 times
...

Save Cancel