Superbadge を獲得すると、学習したスキルを複雑な現実世界のビジネス上の問題に適用して活用することができます。これらの評価には、より高いレベルのスキルと知識が求められます。手順どおりに進める Challenge とは異なり、完了までにより多くの時間がかかることもよくあります。
Control API Access for Connected Apps
Connected App Access Control
Important
Make sure you've connected your special Developer Edition org for this superbadge to Trailhead before making any of the configurations in the following section. Failing to do so may create an unnecessary obstacle or block you from completing the challenge successfully.
To survive in a competitive landscape, startups are required to adapt and move quickly. And as part of that “act fast and ask for forgiveness later” mentality, the admin for Cirrus Cash Flow’s Salesforce org hasn’t restricted any connected applications or the users who have access to them. As a seasoned consultant, you’re well aware of the access connected apps can have without restrictions and that it can pose a major security risk. But you don’t judge. Instead, you’ve already contacted Salesforce Support in order to enable the API Access Control feature so you can get a better handle on API users in the org.
First, Cumulus Global Bank has asked that the admin for Cirrus Cash Flow lock down all connected apps. Only grant API access to allowlisted connected apps; the administrator has to approve user access to these apps. Never allow users to self-authorize for any connected app.
Note
The Trailhead Connected App has been preinstalled in your org for this superbadge. You do not need to make any adjustments to this app to pass the challenge.
The Cirrus Cash Flow org already has the Salesforce Mobile Apps Administration package installed. But to be compliant with Cumulus Global Bank’s mobile security policies, the only employees allowed to access the org via their mobile device are Inside Sales users. Since the company gives all Inside Sales employees the same phone model, they only need access to the Salesforce for iOS connected app.