Tell me more ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.
up vote 6 down vote favorite

I'm using the Salesforce iOS SDK to connect to database.com as the backend for an iOS app we are building. The problem is we need database.com access to be transparent to the user. They shouldn't know that database.com is the backend.

We need to use the old user/pass flow to login automatically in the background and are calling the SOAP API to get a session ID; however, unfortunately, when making an API call you must include a security token with your password if you are "external" to the organization. You must sign into SF.com to generate the security token. This is a no-go from within the app as ALL users will be "external" users.

We can't have them logging into SF.com to generate a token then return to the app.

Any ideas?

share|improve this question

1 Answer

up vote 5 down vote accepted

You can remove the requirement for the security token based on IP address, either at the organization level or the Profile level. If all of the users of this app are the same Profile, add a Login IP Range (at the Profile, not Organizational level) that includes the IP addresses they will be using. You could even add the range 1.0.0.0 through 255.255.255.255 if you want. I would recommend making this range as narrow as possible, but with mobile apps that may not work out.

It almost goes without saying that if you do this you're disabling a big part of Salesforce security.

share|improve this answer
I already tried creating a wide open IP range. Salesforce.com doesn't allow such a wide range. – radesix Sep 19 '12 at 18:28
It doesn't allow that wide a range for the Organization-level Login range (although you can do 1.0.0.0 through 1.255.255.255 and 2.0.0.0 through 2.255.255.255 and so on). However, on the Profile page you can enter a range that includes all IP addresses. I have successfully used the range described above to avoid using a security token. – Jeremy Nottingham Sep 19 '12 at 18:42
You are the man Jeremy!!! Setting it at the profile level works just as you described. Thank you sir! – radesix Sep 19 '12 at 18:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.