Which integration security mechanism should be used when an external application needs to call Salesforce APIs on behalf of a user without storing the user's credentials?
-
A
Basic Authentication
-
B
OAuth 2.0 JWT Bearer Token Flow
-
C
Session ID passed in headers
-
D
IP Whitelisting only