Salesforce Certified Identity and Access Management 2025 – 400 Free Practice Questions to Pass the Exam

Question: 1 / 400

How does the user-agent flow transport the access token?

Via email

By SMS

Through server-to-server communication

The access token is received as an HTTP redirection

The user-agent flow, often used for obtaining access tokens in scenarios involving user login via a web browser, utilizes HTTP redirection to convey the access token. When the user successfully authenticates through the identity provider, the provider redirects the user-agent (the web browser) back to the application with the access token included in the URL fragment or query parameters.

This method is efficient because it leverages the existing web technologies of URLs and redirects, enabling a seamless user experience. Additionally, this allows the token to be securely passed back to the client application without the need for alternate transport mechanisms like email, SMS, or server-to-server communication, which are not suitable for direct user interaction in the context of authentication flows.

Get further explanation with Examzify DeepDiveBeta
Next Question

Report this question

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy