Okta-Certified-Developer 試験問題を無料オンラインアクセス

When you are using a Custom Authorization Server, you can configure the lifetime of the JWT tokens.

• A.For access tokens the minimum is 5 minutes and the maximum is 24 hours
• B.For refresh tokens the idle window is at least 5 minutes and the maximum is 24 hours
• C.For access tokens the minimum is 60 minutes and the maximum is 1 year
• D.For refresh tokens the idle window is at least 10 minutes and the maximum is 5 years

The SAML Assertion Inline Hook is triggered when:

• A.Okta generates a SAML json schema in response to an authentication request
• B.The app generates a SAML assertion in response to an authorization requests from app to Okta
• C.Okta generates a SAML json schema in response to an authorization request
• D.Okta generates a SAML assertion in response to an authentication request

The Okta Sign-ln widget doesn't make Cross-Origin requests as it uses stateless API requests.

• A.Statement is False
• B.Statement is True

Which of the following is/ are True?

• A.The PKCE-enhanced Authorization Code flow will require your application to generate a cryptographically random key called a "code verifier"
• B.The Authorization Code flow with PKCE doesn,t support Refresh Tokens for SPAs
• C.The Authorization Code flow with PKCE doesn,t support Refresh tokens for browser-based apps

Regarding one of the most import Okta Error codes and descriptions, 'E0000001' is:

• A.Invalid session exception
• B.Reader exception
• C.API validation exception
• D.Authentication exception
• E.Illegal API argument exception