問題文
A mobile application installed on employees' phones needs authorized access to Salesforce data. The executable sits on the device, so any secret compiled into it can be extracted. Which flow is designed for this situation?
選択肢
- The Client Credentials flow, and the application can present its own consumer key and consumer secret to the token endpoint and receive a token issued on behalf of a designated integration user, which avoids showing a login page on the small screen.
- The SAML Bearer flow, where the mobile application signs its own assertion with the secret compiled into it and exchanges that assertion for a token.
- The Device flow, because the application runs on a device, and the phone can show the short code that the employee then types on a computer.
- The User-Agent flow, which does not use the client secret and returns the token through an external or embedded browser.