Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 6 Question 72 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 72
Topic #: 6

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow employees to post Ideas from the Employee portal. When users click on some of the links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with the relevant pages. What OAuth flow is best suited for this scenario?

CUser-Agent flow

AWeb Application flow

DWeb Server flow

BSAML Bearer Assertion flow

Show Suggested Answer

Suggested Answer: D

by Serina at Jan 23, 2026, 05:12 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Javier

2 months ago

True, but it’s less secure. We need to protect user data.

upvoted 0 times

...

Bambi

2 months ago

But what about the Implicit flow? It’s simpler for web apps.

upvoted 0 times

...

Cristen

2 months ago

Yeah, it allows for secure authentication and redirection.

upvoted 0 times

...

Kimberely

2 months ago

I think the Authorization Code flow is the best choice here.

upvoted 0 times

...

Selma

2 months ago

Definitely Authorization Code, it’s the most secure choice!

upvoted 0 times

...

Felton

4 months ago

I’m not sure if that’s the best option, what about the Implicit flow?

upvoted 0 times

...

Fanny

4 months ago

Wait, can they really use Salesforce Ideas like that?

upvoted 0 times

...

Lenna

4 months ago

Totally agree, that flow is perfect for web apps!

upvoted 0 times

...

Delsie

4 months ago

Sounds like they need the OAuth 2.0 Authorization Code flow.

upvoted 0 times

...

Shawn

5 months ago

The Authorization Code flow? That's like using a rotary phone to make a call. Get with the times, people!

upvoted 0 times

...

Leonard

5 months ago

The Authorization Code flow? Pfft, that's so 2010. Real developers use the Device Grant flow these days. Just sayin'.

upvoted 0 times

...

Carmelina

5 months ago

The Authorization Code flow is definitely the way to go. Gotta keep that security tight, you know?

upvoted 0 times

...

Deangelo

5 months ago

Hmm, I'm not sure the Authorization Code flow is the right choice here. Wouldn't the Implicit flow be better for a simple portal integration?

upvoted 0 times

...

Jesus

5 months ago

I agree, the Authorization Code flow would allow for secure authentication and redirection to the relevant Salesforce pages.

upvoted 0 times

...

Isaac

5 months ago

The OAuth 2.0 Authorization Code flow seems like the best fit for this scenario.

upvoted 0 times

...

Fausto

6 months ago

I definitely recall that for user authentication from a portal, the Authorization Code Grant is often recommended, but I need to double-check the specifics.

upvoted 0 times

...

Billy

6 months ago

I feel like the Resource Owner Password Credentials flow could work too, but I’m not entirely confident about the security implications.

upvoted 0 times

...

Major

7 months ago

I remember practicing a similar question about redirecting users, and I think the Implicit Grant flow could be relevant here since it's for web applications.

upvoted 0 times

...

Sunshine

7 months ago

I think this might be an OAuth 2.0 flow, but I'm not sure if it's the Authorization Code Grant or something else.

upvoted 0 times

...

Brett

7 months ago

Hmm, I'm not sure if the Authorization Code flow is the only option here. The Implicit flow could also work, as it's designed for web-based apps. I'll need to compare the pros and cons of each.

upvoted 0 times

...

Paris

7 months ago

I'm feeling pretty confident about this one. The Authorization Code flow allows for redirection and authentication, which seems to match what the question is asking for. I'll start sketching out the steps for that flow.

upvoted 0 times

...

Josphine

7 months ago

I'm a bit confused on the details here. Do the users already have Salesforce accounts, or do we need to handle account creation as well? That could impact the OAuth flow we choose.

upvoted 0 times

...

Tamra

7 months ago

Okay, the key here is that users need to be redirected from the Employee portal to Salesforce and authenticated. That sounds like the Authorization Code flow might be a good fit.

upvoted 0 times

...