-
What is difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow in Salesforce?
In Salesforce, what is the difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow?
-
1 Reply
-
- Web server flow (In OAuth spec terms, Authorization Code Grant) tends to be used for web applications where server-side code needs to interact with Force.com APIs on the user's behalf, for example DocuSign:Tokens are sent directly from the Authorization Server to the OAuth Client app, providing a high level of security.
- Username-Password flow (Resource Owner Password Credentials Grant) can be used for testing, or for apps that operate non-interactively, such as legacy integrations, without a user to actively give authorization:
$ curl -d 'grant_type=password&client_id=3MV_CLIENT_ID&client_secret=1234&[email protected]&password=password' \
https://login.salesforce.com/services/oauth2/token{
"id":"https://login.salesforce.com/id/ORG_ID/USER_ID",
"issued_at":"1385271368428",
"instance_url":"https://na15.salesforce.com",
"signature":"Vcz4TlGBQJCwJzNtH3AHT/kUFLM4N/sFrJODX2ZNuyE=",
"access_token":"00D_ACCESS_TOKEN"
}Username-password is generally discouraged and should be used only where no other alternative is available, due to the inherent problems with passwords.
- User-Agent flow (Implicit Grant) tends to be used for mobile or desktop applications, for example Salesforce1 or Mobile SDK apps:Tokens are returned to the Client app via a 'hash fragment' on a URL.
Log In to reply.
Popular Salesforce Blogs
Get Started With Salesforce Health Cloud
The managed package includes five different data models and it continues to expand. General understanding of data models and the out-of-the-box capabilities of Health Cloud.…
This Halloween, Run Salesforce SMS Marketing Campaigns with 360 SMS App | Salesforce
Canada, the United States, England, Ireland, Mexico, etc. are a few countries that grandly celebrate Halloween. The holiday of Halloween holds special importance in the…
Order of Execution in Salesforce
Order of execution in salesforce is like an ABC in Salesforce World, make sure you should understand:- System Validation rule(required field, field format). Before Trigger…
Popular Salesforce Videos
Non-technical But Want to Build Career in Salesforce?
In this video Shrey gave the answer to the following questions: 1. What is the next step after doing Certification in Salesforce Administrator? 2. How…
Salesforce Announces New Salesforce CDP Updates | Salesforce CDP
Salesforce, one of the largest global providers of CRM solutions, launched Salesforce CDP last year. Salesforce Customer Data Platform is an enterprise customer data platform…
How to Use Customer 360 | Salesforce
See how Salesforce Customer 360, our entire portfolio of technology, unites your team with company data on one integrated CRM platform, delivering the personal experiences…
