8.41An interview scenario

Interviewer:

“How would you manage Salesforce credentials across dev, QA and production?”

Strong answer:

“I'd use separate Salesforce integration identities and OAuth client configuration per environment, externalize all endpoints and credentials, and inject secrets through secure configuration or the organization's secrets platform. I'd promote the same application artifact between environments rather than modifying code. Production credentials would only be accessible from the production deployment context.”

Very strong.