Salesforce ArchitectureArchitect (Hardest)securityconnected-appbaseline
Design enterprise security baseline for Salesforce connected apps and APIs
Real World Scenario
CISO requires enterprise security baseline; audit finds 80 connected apps with excessive OAuth scopes and no IP restriction.
Expected Answer
• Baseline: minimum scopes MFA integration user no refresh token where JWT possible
• Connected app approval workflow security review before prod
• Annual recertification disable unused apps
• IP restriction or mTLS for server integrations mandatory
• OAuth policies token lifetime 15 minute access where feasible
• ApiEvent monitoring anomaly detection all prod apps
• Exception register CISO sign-off documented risk acceptance
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Direct answer: Baseline: minimum scopes MFA integration user no refresh token where JWT possible Also consider: Connected app approval workflow security review before prod In practice: Annual recertification disable unused apps Document the decision in an ADR and align with enterprise standards.
Architect Perspective
Connected app baseline is enforceable policy—without approval workflow baseline is wish list.