3. Safe Harbour Statement
● Both the speaker and the host are organizing this meet-up in individual capacity only.
We are not representing our companies here.
● This presentation is strictly for learning purposes only.
● Organizer/Presenter do not hold any responsibility that same solution will work for
your business requirements.
● This presentation is not meant for any promotional activities.
3
4. A recording of this meetup will be uploaded to events page within 24 hours.
Questions can be submitted/asked at any time in the Chat/Questions & Answers Tab.
Make it more Interactive!!!
Give us feedback! Rate this meetup session by filling feedback form at the end of the day.
We Love Feedbacks!!! Its Bread & Butter for Meetup.
Housekeeping
4
5. Introduction
● About the Organizers
5
Shubham Chaurasia
Billennium India
Pro Integration Developer
A SHOW OF HANDS:
Who is new to this Meetup?
Giridhar Meka
Sr. Technical Architect
linkedin.com/in/giridharmeka
linkedin.com/in/shubhamchaurasia1
6. 7+ years of total IT experience (3+ in MuleSoft)
Certified MuleSoft Developer and Integration Architect
Working as Sr. Engineering Management Specialist at
HashedIn By Deloitte
6
Kavitha D
Sr. Engg Mgmt Specialist
Introduction
● About the Speaker
7. Agenda
● Introductions
o What is MFA?
o What are Connected Apps?
o Access, Authorization & Grant Types of Connected Apps
o CloudHub deployment Using Client_ID & Client_Secret, bearer token
o Limitation of creating Connected Apps
● Demo
● Trivia
7
8. Multi-factor Authentication (MFA)
Beginning February 1, 2022, MFA must be enabled for all of your Salesforce users.
Beginning October 29, 2022, all non-SSO accounts that do not have MFA configured or are not on
your organization’s exemption list are prompted to configure MFA when they log into Anypoint
Platform.
To prevent service disruptions, identify any accounts (service accounts) that are used to
programmatically call Anypoint Platform. However, it’s best to use the Connected Apps feature to
authorize apps to make programmatic calls to Anypoint Platform instead of using service accounts.
Using the Connected Apps feature provides more security & control than using user accounts.
8
9. Connected Apps
Multi-factor authentication (MFA) provides an additional layer of verification for Anypoint Platform
users.
By default, MFA is required for all user accounts except accounts that use single sign-on (SSO)
Connected apps help users delegate their access without sharing sensitive credentials or giving full
control of their accounts to third-parties.
Actions taken by connected apps are audited, and users can also revoke access at any time.
The Connected Apps feature enables you to use secure authentication protocols and control an
app’s access to user data.
Users must verify their Anypoint Platform credentials using at least one of four verification methods:
9
Security key
Built-in authenticator
Salesforce Authenticator
Third-party TOTP authenticator apps
10. Access & Authorization
An end user can authorize apps to access particular information, such as viewing assets in
Anypoint Exchange.
An Org admin who is developing a connected app can register new (and manage existing) apps
within their organization.
An Org admin can control how their organization’s data is used by allowlisting apps, revoking
access, and disabling this feature for the entire organization.
10
11. 11
Connected
App Types
App that acts on behalf of a
user
Authorized by a user to act on
their behalf
App that acts on its own
behalf
Acts on its own behalf without
impersonating a user.
It can only be used within this
organization
17. Summary
17
Benefits:
It can be tracked and auditable
Granted access can be revoked
Application actions are logged in the Audit Log
Password change is not required if granted access is revoked
Passwords can be changed without having to update other systems
Limitations:
Each connected app can have up to 1000 scopes
An organization can own up to 2000 Connected Apps
20. Take a stand !
● Nominate yourself for the next meetup speaker and suggest a topic as well.
20
21. ● Share:
○ Tweet using the hashtag #MuleSoftMeetups
○ Join Mysore Group: https://meetups.mulesoft.com/mysore/
● Feedback:
○ Fill out the survey feedback and suggest topics for upcoming events
○ Contact MuleSoft at meetups@mulesoft.com for ways to improve the program
○ Reach out to Mysore Meetup Leaders (Shubham/Giridhar) to suggest
topics for next Meetup
What’s next?
21
22. Get ready to WIN a MuleSoft Voucher from MuleSoft
Quiz Time