PL-400 · Question #345
The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…
The correct answer is D. OAuth 2.0. To allow a publicly accessible survey page to write data to a Microsoft Dataverse environment without requiring explicit user credentials, implement OAuth 2.0 for application-level authentication.
Question
Options
- AAzure AD Conditional Access
- BAzure guest account
- CX.509 certificate
- DOAuth 2.0
How the community answered
(55 responses)- A13% (7)
- B7% (4)
- C4% (2)
- D76% (42)
Why each option
To allow a publicly accessible survey page to write data to a Microsoft Dataverse environment without requiring explicit user credentials, implement OAuth 2.0 for application-level authentication.
Azure AD Conditional Access is a policy engine for controlling access based on various conditions, not an authentication mechanism itself for application-level access without user credentials.
An Azure guest account still requires a specific user identity and explicit credentials, which contradicts the requirement for no explicit user credentials for writing data from a public page.
X.509 certificates can be used as a form of client credential within an OAuth 2.0 flow, but OAuth 2.0 is the overarching authentication mechanism that enables this scenario.
OAuth 2.0 provides an authorization framework where an application can obtain an access token to interact with protected resources like Dataverse. By using the client credentials flow (part of OAuth 2.0), the public website's backend application can authenticate itself with Azure AD to get a token and write data to Dataverse without an end-user signing in.
Concept tested: OAuth 2.0 for application authentication in Dataverse
Source: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/authenticate-web-api-application-users
Community Discussion
No community discussion yet for this question.