Hi Everyone,

Can you please help me validate my approach for the scenario given below?

If my community user uses a custom native mobile app to talk to Salesforce and Salesforce in turn relies on Facebook to log him in . Which oauth flow would I use ? How would the flow look like. It seems to me that this is a nested scenario which comprises of 2 parts:

Part 1 : Salesforce Native Mobile App (Client) && Salesforce - User Agent Oauth Flow .

Part 2 : Salesforce(Web Server) && Facebook(Auth Server) : Open Id Connect using Web Server Flow.

Can someone please throw some light on this and help me validate my answer?

Is this a perfect use case for 

OAuth Web Server Authentication Flow where Client secret is optional?

https://releasenotes.docs.salesforce.com/en-us/spring17/release-notes/rn_security_auth_secret_optional.htm

Thanks!!