-
What is difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow in Salesforce?
In Salesforce, what is the difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow?
-
1 Reply
-
- Web server flow (In OAuth spec terms, Authorization Code Grant) tends to be used for web applications where server-side code needs to interact with Force.com APIs on the user's behalf, for example DocuSign:Tokens are sent directly from the Authorization Server to the OAuth Client app, providing a high level of security.
- Username-Password flow (Resource Owner Password Credentials Grant) can be used for testing, or for apps that operate non-interactively, such as legacy integrations, without a user to actively give authorization:
$ curl -d 'grant_type=password&client_id=3MV_CLIENT_ID&client_secret=1234&[email protected]&password=password' \
https://login.salesforce.com/services/oauth2/token{
"id":"https://login.salesforce.com/id/ORG_ID/USER_ID",
"issued_at":"1385271368428",
"instance_url":"https://na15.salesforce.com",
"signature":"Vcz4TlGBQJCwJzNtH3AHT/kUFLM4N/sFrJODX2ZNuyE=",
"access_token":"00D_ACCESS_TOKEN"
}Username-password is generally discouraged and should be used only where no other alternative is available, due to the inherent problems with passwords.
- User-Agent flow (Implicit Grant) tends to be used for mobile or desktop applications, for example Salesforce1 or Mobile SDK apps:Tokens are returned to the Client app via a 'hash fragment' on a URL.
Log In to reply.
Popular Salesforce Blogs
Get Picklist Values in Salesforce Lightning Component From a Common Apex Function
See below the code example to get Picklist Values in Salesforce Lightning Component from a Common Apex Function: CommonPicklist.cmp <aura:component controller="CommonPicklistController"> <aura:attribute name="ObjectName" type="String" default="Opportunity"…
How to Measure a Marketing Campaign Effectiveness?
In the world of marketing, data is everything. To make informed decisions and optimize your marketing strategies, it is crucial to measure the effectiveness of…
Adopt Visualforce with new Lightning Experience
None of us are anymore oblivious of the fact that Salesforce Lightning Experience is a modern, productive user experience designed to multiply the efficiency manifold.…
Popular Salesforce Videos
Interested to Learn Salesforce? But Unsure Where to Start?
Salesforce is a popular CRM tool for support, sales, and marketing teams worldwide. Salesforce services allow businesses to use cloud technology to better connect with…
Salesforce Business Analyst Training
In the 35th Episode of the #AskTheHulk series, Savitha Asked about how to switch to IT from Non-IT background. To this question, Shrey suggested that…
How to Take Your Salesforce Support Model to the Next Level
Jeremy Muldoon, the Salesforce expert at Rimini Street, discusses the Salesforce resource challenges faced by businesses today, how to overcome them, and how to take…
