Salesforce Certified Identity and Access Management Designer Questions & Answers Already Graded A+

Salesforce uses *this* protocol to allow users of applications to securely access data on the platform without having to reveal their username and password credentials. - OAuth 2.0 How do you register your application on the Salesforce platform for use with OAuth 2.0, SSO, etc.? - Create a Connected App What is an OAuth authentication flow? - An OAuth authentication flow defines a series of steps used to coordinate the authentication process between your application and Salesforce. Name the supported OAuth authentication flows. -1.) Web-server flow 2.) User-agent flow 3.) Username-password flow 4.) JWT bearer token flow 5.) SAML bearer assertion flow 6.) SAML assertion flow 7.) Device authentication flow 8.) Asset token flowWhat purpose does a Callback URL serve within the Connected App settings? -Depending on the OAuth authentication flow used, the Callback URL typically defines the URL to which the user is redirected after successful authentication. Additionally, the Callback URL is used to establish trust between the two systems. The Callback URL must match between the system requesting authorization/access and the Connected App defined in Salesforce. NOTE: As this URL is sometimes used for some OAuth flows to pass back an access token, the URL must use HTTPS or a custom URI scheme. OAuth is typically compared to this when describing its purpose. - A valet key. Just as a valet key allows access for a user to drive a car, but NOT access the glove compartment or the trunk, OAuth authorizes an application to access Salesforce on behalf of the user, while also defining the OAuth Scopes (i.e. what the application can do, and what the application cannot do)