Certified Identity and Access Management Designer

By Salesforce · Question Mode

QuestionQ1

VerifiedSalesforce as an Identity Provider

The CIO of Universal Containers (UC) wants to begin using the refresh token capability for UC applications that use OAuth 2.0. UC has engaged an Architect to review all applications that use OAuth flows and identify where refresh tokens can be used.

Which two OAuth flows should the Architect consider in the evaluation?

Choose two
Explanation

Salesforce issues refresh tokens for the OAuth 2.0 Web Server and User-Agent flows when the refresh_token or offline_access scope is requested. Those refresh tokens can be exchanged for new access tokens after the current access token expires.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!