Universal Containers built a custom mobile app fortheir field reps to create orders in Salesforce.

Vendor: Salesforce
Product: Identity-and-Access-Management-Architect
Update on: Mar 15, 2026
Questions: 243

Salesforce Identity-and-Access-Management-Architect Question Answer

Universal Containers built a custom mobile app fortheir field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature.

What should the logout function perform in this scenario, where user sessions are refreshed automatically?

Invoke the revocation URL and pass the refresh token.

Clear out the client Id to stop auto session refresh.

Invoke the revocation URL and pass the access token.

Clear out all the tokens to stop auto session refresh.