Question 680
At Brookside Manufacturing, the plant software team is implementing a work-order system upgrade under requirements for planned downtime and production traceability. The team says the following incident was fixed: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. Which result BEST proves the intended fix is effective?
Explanation
Correct Answer
A second authorized user completes sign-in and invokes the service without using the maker's identity. This directly tests whether the reported failure has been corrected: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The intended action was Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. The observed Brookside Manufacturing outcome is stronger evidence than a completed ticket or a saved configuration alone.
Incorrect Answers
Maker interfaces display distinct well-typed actions and the intended operation is callable. Such evidence would validate a different change: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. It follows the separate remedy Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.
Authorized connector requests reach the function while anonymous and wrong-scope requests are denied. Such evidence would validate a different change: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. It follows the separate remedy Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.
The test operation accepts the full account identifier and sends the expected request shape. Such evidence would validate a different change: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. It follows the separate remedy Correct the OpenAPI parameter type and schema before regenerating connector operations. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.