Control API Access for Connected Apps

Connected App Access Control

Important

Make sure you've connected your special Developer Edition org for this superbadge to Trailhead before making any of the configurations in the following section. Failing to do so may create an unnecessary obstacle or block you from completing the challenge successfully.

To survive in a competitive landscape, startups are required to adapt and move quickly. And as part of that “act fast and ask for forgiveness later” mentality, the admin for Cirrus Cash Flow’s Salesforce org hasn’t restricted any connected applications or the users who have access to them. As a seasoned consultant, you’re well aware of the access connected apps can have without restrictions and that it can pose a major security risk. But you don’t judge. Instead, you’ve already contacted Salesforce Support in order to enable the API Access Control feature so you can get a better handle on API users in the org.

First, Cumulus Global Bank has asked that the admin for Cirrus Cash Flow lock down all connected apps. Only grant API access to allowlisted connected apps; the administrator has to approve user access to these apps. Never allow users to self-authorize for any connected app.

Note

The Trailhead Connected App has been preinstalled in your org for this superbadge. You do not need to make any adjustments to this app to pass the challenge.

The Cirrus Cash Flow org already has the Salesforce Mobile Apps Administration package installed. But to be compliant with Cumulus Global Bank’s mobile security policies, the only employees allowed to access the org via their mobile device are Inside Sales users. Since the company gives all Inside Sales employees the same phone model, they only need access to the Salesforce for iOS connected app.

Resources

• Salesforce Help: User Authentication Superbadges: Trailhead Challenge Help