Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

Question

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.

The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.

Which connected app setting should be leveraged to comply with this policy change?

Ann Nacua · Accepted Answer

Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.

Ann Nacua · Answer

Scope - Deny refresh_token scope for this connected app.

Ann Nacua · Answer

Session Policy - Set timeout value of the connected app to 7 days.

Ann Nacua · Answer

Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 229 - Certified Identity and Access Management Architect discussion

Suggested answer: B

0 comments