Posts

Showing posts from August, 2023

Client Credential Flow

Image
Client Credentials Flow is simple and easy authentication mechanism which Salesforce has newly introduced in Spring 23. This flow comes handy when you want to connect your app to Salesforce APIs outside the context of any particular user What does the Client Credential Flow brings to the table? - Consumer key and secret becomes the client credentials - Eliminates the need for explicit user credential sharing - More secure alternative to the OAuth 2.0 username password flow How client credential flow is more secure and easy to maintain than username password flow? There are two primary reasons which makes the client credential flow more secure 1. To get the access token, explicit user credentials are not required thus, encapsulates the user context 2. Client Id and Client Secret are comparatively long and random As the explicit user context is not known to third party application thus, it makes the integration dynamic and easy to maintain. Suppose, we have an integration which use us