- Created a Connected App and got the Consumer Key and Consumer Secret
- Created a RST API Webservice in Salesforce (by exposing Apex Class as a REST WEbservice
- Installed 'Advanced REST Client' Plugin in Chrome and followed these steps to generate an Access Token
- I am able to get response from POstman as well as Advanced REST Client by using this Access Token (Authorization Type = OAuth 2.0)
So far so good..
My question is -
To be able to get the access token I used the Consumer Key + Consumer Secret + username + (password + security token). How would the external application generate the access token? I have given Consumer Key and Consumer Secret to the third party.
How do I ensure third party app is securely and successfully authenticated in Salesforce every time it calls the salesforce webservice, and is able to retrieve the data?