Exam Integration-Architect Topic 5 Question 86 Discussion

For outbound integrations from Salesforce to an external cloud gateway like Microsoft Azure API Gateway, securing the communication at the transport layer is a fundamental requirement. While standard SSL provides one-way encryption where the client (Salesforce) verifies the server (Azure), Mutual Server Authentication (Two-Way SSL/TLS) ensures that both parties are verified before data is exchanged.
In this architecture, Salesforce presents a digital certificate to the Azure API Gateway during the TLS handshake. For production environments, Salesforce architects recommend using certificates signed by a Certification Authority (CA) rather than self-signed certificates to establish a trusted chain of identity that complies with enterprise security standards. This mechanism prevents unauthorized clients from connecting to the Azure endpoint, effectively mitigating man-in-the-middle attacks and unauthorized data exfiltration.
While a Connected App and OAuth (Option B) are essential for inbound requests where external systems call Salesforce, they do not natively secure the point-to-point connection when Salesforce acts as the client.
Similarly, a federated API access model (Option A) focuses on user identity but does not address the transport layer security between the two cloud platforms. By configuring two-way SSL, Northern Trail Outfitters ensures that the Azure API Gateway only processes requests originating from a trusted, authenticated Salesforce instance, fulfilling the high security and trust requirements of modern integration architecture.