A web service is developed that allows secure access to customer order status on the Salesforce Platform. The service connects to Salesforce through a connected app with the web server flow. The following are the required actions for the authorization flow: 1. User Authenticates and Authorizes Access 2. Request an Access Token 3. Salesforce Grants an Access Token 4. Request an Authorization Code 5. Salesforce Grants Authorization Code What is the correct sequence for the authorization flow?
Correct Answer: B
Explanation The web server flow is an OAuth 2.0 authorization code grant type, which follows this sequence of steps: The client app requests an authorization code from Salesforce by redirecting the user to the authorization endpoint. The user authenticates and authorizes access to the client app. Salesforce grants an authorization code and redirects the user back to the client app. The client app requests an access token from Salesforce by sending the authorization code to the token endpoint. Salesforce grants an access token and a refresh token to the client app. References: OAuth Authorization Flows, Authorize Apps with OAuth
