PL-400 · Question #342
The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…
The correct answer is D. Client secret. To allow a publicly accessible survey page to write data to Microsoft Dataverse without requiring explicit user credentials, client secret-based authentication should be implemented.
Question
Options
- AClaims based
- BMicrosoft 365
- CAzure guest account
- DClient secret
How the community answered
(42 responses)- A2% (1)
- B10% (4)
- C5% (2)
- D83% (35)
Why each option
To allow a publicly accessible survey page to write data to Microsoft Dataverse without requiring explicit user credentials, client secret-based authentication should be implemented.
Claims-based authentication is typically tied to user identities and roles, which is not suitable for a public page writing data without explicit user credentials.
Microsoft 365 authentication requires a user to sign in with their Microsoft 365 credentials, directly contradicting the requirement for no explicit user credentials.
An Azure guest account still represents a specific user identity requiring credentials, and the requirement is for no explicit user credentials for the data writing process.
Client secret authentication provides a secure method for an application, such as a backend service for a public website, to authenticate directly with Azure AD using its own identity. This enables server-to-server communication to write data to Dataverse without needing an explicit end-user login or specific user credentials.
Concept tested: Application authentication for Dataverse
Source: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/authenticate-web-api-application-users
Community Discussion
No community discussion yet for this question.