I am following up the post here: REST API without Connected App
Although the answer was very helpful, I'm new to SF and need some clarity on some things:
1. How and why can a separate (free developers) environments
secretprovide a connection for an organization's environment?
My current thought is that this just provides the connection to Salesforce so that you can get a
request_token (serving as the Authorization server role described here) that can then used by the application (in my case a WordPress plugin using the Username-Password flow), to request an
access_token. This is all new and very theoretical though so I appreciate any details
2. How do I create the managed (or can it be unmanaged) application and namespace?
I created an application, and then I created an connected application in my org's sandbox, was that unnecessary? From the previous response it seems I need a managed package, is that as simple as firing up a developer edition specific to this Salesforce API connector application for WordPress I'm working on? Then do I just create a "connected application" within there?
3. How does deployment work?
*From there is just a matter of activating my WordPress plugin and authenticating with an API user credentials for any org I want? Nothing more required within the org itself? Adding remote site or approving some IP, anything?
NOTE If you needed more information or are interested in seeing the full scope of what I'm attempting with the Salesforce API Connector for WordPress you can keep up with its development status here