IntegrationBeginneroauthconnected-app
What is OAuth for Salesforce integrations?
Real World Scenario
Middleware needs long-running access to Salesforce without a human logging in daily. You explain OAuth flows simply.
Expected Answer
• OAuth grants scoped access tokens after authorization
• Connected apps register integration client credentials in Salesforce Setup
• Server-to-server often uses JWT bearer or client credentials depending on use case
• User-delegated flows use authorization code when acting on behalf of a person
• Store refresh tokens securely and rotate secrets per security policy
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Dedicated Salesforce user with minimum permissions for API jobs—not a human admin personal account. Easier to audit and lock down.
Architect Perspective
Integration user + least privilege—pair with OAuth in every beginner security answer.