#Ladies Be Architect0 personne en discute

In both Authorization Code and Credentials Flow for Customers and Partners and OAuth 2.0 Username-Password Flow user's Salesforce username-password is exchanged by the Third-party app with Salesforce Authorization server to obtain the access token.

In fact the Auth Code and Cred Flow passes the user's username password over browser call to obtain the auth code . Whereas , in Username-Password flow there is a possibility to do this exchange from the Third-Party app's backend-server to obtain the access token.

a. If the above is true , then is "Authorization Code and Credentials Flow for Customers and Partners" more / less / same secure compared to "OAuth 2.0 Username-Password Flow" ?

b. If more then how ?

c. If Less/same , then what should be most secure way to implement "headless login" for a Third-party app (client ) with Salesforce ( the resource server ) ?

#OAuth 2.0 #Headless Commerce #Community Cloud

@Gianluca Calcagni @Kannan Narayanan #Ladies Be Architect 

1. Integrate with ABN lookup API ( a 3rd party api which provides ABN validation ) : Point-to-Point / IPaaS / on-Prem ESB 

2. Integrate with a cloud based application like Workday : Point-to-Point / IPaaS / on-Prem ESB

@Gregory Cook  #Integration  #MuleSoft Composer #Ladies Be Architect

I'm studying for the Identity and Access Management exam, which is why I'm thinking about this.  Any insight is appreciated! #Ladies Be Architect

Saturday is coming soon!  I'll be presenting at Virtual Dreamin' on how to bulk update field level security.

@Suzanne Ferguson , Can we have the Review board mock question and answer recorded session? The main purpose of this mock Q&A session would be getting the idea, how much depth the review board question goes to. I have seen a couple of sessions in the Ladies Be Architect. But not sure whether these sessions resemble 10% of the actual review board Q&A. It would be beneficial for all the people who are preparing for the CTA.