Superbadge를 통해 학습한 스킬을 복잡한 실제 비즈니스 문제에 적용할 수 있습니다. 이러한 평가는 더 높은 수준의 스킬과 지식을 요구합니다. 단계별로 안내되는 과제가 아니며 완료하는 데 더 많은 시간이 필요한 경우가 많습니다.
Control API Access for Connected Apps
Connected App Access Control
Important
Make sure you've connected your special Developer Edition org for this superbadge to Trailhead before making any of the configurations in the following section. Failing to do so may create an unnecessary obstacle or block you from completing the challenge successfully.
To survive in a competitive landscape, startups are required to adapt and move quickly. And as part of that “act fast and ask for forgiveness later” mentality, the admin for Cirrus Cash Flow’s Salesforce org hasn’t restricted any connected applications or the users who have access to them. As a seasoned consultant, you’re well aware of the access connected apps can have without restrictions and that it can pose a major security risk. But you don’t judge. Instead, you’ve already contacted Salesforce Support in order to enable the API Access Control feature so you can get a better handle on API users in the org.
First, Cumulus Global Bank has asked that the admin for Cirrus Cash Flow lock down all connected apps. Only grant API access to allowlisted connected apps; the administrator has to approve user access to these apps. Never allow users to self-authorize for any connected app.
Note
The Trailhead Connected App has been preinstalled in your org for this superbadge. You do not need to make any adjustments to this app to pass the challenge.
The Cirrus Cash Flow org already has the Salesforce Mobile Apps Administration package installed. But to be compliant with Cumulus Global Bank’s mobile security policies, the only employees allowed to access the org via their mobile device are Inside Sales users. Since the company gives all Inside Sales employees the same phone model, they only need access to the Salesforce for iOS connected app.