I am exposing a API in salesforce which will be hit by an external c# application. I am enabled oAuth mechanism. Things are looking good but when the external end point needs to pass user id and password + security token to get the access token. Is there any other way to get the access token as because password will get changed every three month for my user id
1 Answer
Yes, by using one of the other OAuth 2.0 flows that Salesforce supports.
It sounds like you're using the Username-Password flow (which is mostly only suitable for testing/prototyping). If you are unable to show a screen to a user (for them to enter their own credentials), then the only other non-interactive flow is the JWT Bearer flow.