Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

learn more… | top users | synonyms

1
vote
0answers
19 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
0
votes
1answer
24 views

In an internal SFDC Http Get from a VF Page, how do I authenticate for the redirected URL?

I'm trying to execute an internal http: GET from a VF page on a Knowledge Article so that I can parse the response HTML for some text in the page. (The Knowledge article looks like this: ...
0
votes
0answers
20 views

Can a user with Chatter Free or Identity user licenses be given permission for mutual authentication

Can a user with Chatter Free or Identity user licenses be given permission for mutual authentication.
1
vote
1answer
81 views

Getting remote access authorization error with Mobile SDK on iOS

When this happens during oauth on iPad, clicking the Not You link and reentering the username/pwd takes the user to a full screen web view of the Salesforce UI instead of my mobile app!!! Ugh! So I'm ...
0
votes
0answers
18 views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
2
votes
2answers
45 views

Rest Call without using Connected App

We have a REST call that one of our systems is making to Salesforce but we do not have a Connected App set up. I cannot for my life figure out how to do this without a connected App that uses the ...
1
vote
1answer
53 views

@future invocation of REST service on same org - how to get accessToken?

I have a business requirement to attach a pdf document (visualforce rendered as pdf) to Notes and Attachments on a record when that record gets updated. Since we can't use getContentAsPDF() in the ...
6
votes
2answers
177 views

“Session expired or invalid” problem calling an @RestResource from Apex in Winter '15 preview; UserInfo.getSession returns null for Force.com Sites

Based on threads such as Calling Apex Rest custom web service from Apex code we have HTTP calls in our Apex code (contained in a managed package) back to the same org authorized like this: ...
0
votes
0answers
27 views

Any issues with this external login strategy?

I need to migrate portal user accounts to another solution and I'd like to do it as seamlessly as possible. As all other data is exportable, the primary issue is passwords. I've got functional code ...
3
votes
3answers
114 views

Making rest request with Oauth

I have all four Oauth token consumerKey, consumerSecret, accessKey and accessSecret. I need to make a request to a url from my apex code. Is there any library or a way to make this request. In java I ...
1
vote
0answers
28 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
1
vote
1answer
44 views

How to access the context in the canvas app using payload?

Based on the canvas documentation, i have setup the canvas app so that the authentication is OAuth. Also, I have been in the assumption that OAuth flow can be handled entirely through javascript ...
2
votes
3answers
45 views

EmailMessage Insert from an Authenticated Force.com Site VF Page throws INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY

I am building a typical help site where there are a lot of unauthenticated pages that the user can view like product catalog, help guides ...etc and couple of authenticated pages (My Cases, Case ...
2
votes
1answer
52 views

how would Force.com Canvas SDK and canvas method “verifyAndDecodeAsJson” work with non-java platform? Is there any workaround?

I am using signed request as the method to POST the data to the canvas app. The canvas app is the SAP BSP page. I now seeing a big road block that I am not able to retrieve the values from the context ...
1
vote
3answers
155 views

How can i login into salesforce from salesforce let's say through apex code or REST API class

How can I get the session id? Can I log in into Salesforce through Apex code? I have achieved similar functionality using Java but I am not sure how to achieve this using Apex.
2
votes
2answers
126 views

How to use JavaScript to detect if a user has a valid Salesforce session

I have a VisualForce page that it is possible to use offline because I am caching the page and other resources in the application cache. I have a button on that page that will execute a Visualforce ...
1
vote
2answers
27 views

Salesforce Mobile SDK Authentication flow issue

Created an android_hybrid Mobile app with Mobile SKD version 2.1 Added the remoteAccessConsumerKey at bootconfig.json as per my Connected App Update the oauthscope as "oauthScopes": ["api ...
2
votes
1answer
244 views

In what case should OAuth 2.0 Refresh Token Flow be used?

I am now using web server authentication flow along with refresh token flow in my system. Once a user granted a permission for the app to access, the app will request a permission, an access token and ...
1
vote
2answers
31 views

Allow access to certain sections of Customer Portal without login

Is it possible to give limited access to users in Customer Portal without logging in? (.e.g. access to the homepage and and some visual force pages). When the user tries to access say a Custom Object ...
1
vote
2answers
175 views

Authorization Required

I have created simple site that create a new case. Note : I have given the Site permissions Visualforce page,Controller ,Lead Object and Case Object. While execute the site Lead is created ...
2
votes
0answers
74 views

Authorization header missing from RestRequest headers map

I have a publicly exposed web service (Rest Apex) through Sites and I'd like to do basic authentication which I will manage myself. I noticed that when I specify Authorization: Basic ...
1
vote
0answers
52 views

Multiple Connected apps for oauth

I have a web application that has a mobile component. Both of them have Salesforce oAuth and use different connected apps. Sometimes users authenticate only via the mobile app and their credentials ...
3
votes
0answers
114 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Intiatied Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
4
votes
1answer
45 views

What is the best authentication scheme for my REST application?

In my company we have created report data in Salesforce. I would like to make an internal web application that reads this report data via the REST API of Salesforce and visualizes this. I am now using ...
5
votes
1answer
109 views

Using LinkedIn for social login to salesforce

so i have been looking for solutions all over the web to try and find the solution to this simple question: how do i use linkedin as a social login method for any salesforce app/portal/community i ...
1
vote
0answers
47 views

Rails form that saves data to Salesforce and local DB

I have a user registration form that requires certain fields to be saved to different locations. Fields such as email and name need to be used to create a new salesforce object (Account). Email, ...
5
votes
1answer
189 views

frontdoor.jsp for Customer Portal user? How to authenticate a portal user with session id?

authenticate a customer portal using SOAP login() method and LoginScopeHeader receive SessionID in LoginResult object How can I use SessionID to redirect the user's browser to the customer portal and ...
0
votes
0answers
36 views

Asking to login again when application is terminated and launch it again

I have create a web view with frame size to which i am adding the sales force web view after launching the app in the first time it is asking the credentials and login fine But the problem is when i ...
3
votes
0answers
168 views

Rest API Authorization

We're trying to use the JSforce library (http://jsforce.github.io/) for javascript access to the salesforce api but we keep getting "invalid_grant" errors when trying to authenticate <script ...
4
votes
1answer
463 views

Passing Session Id using URL instead of HTTP headers

When invoking the Tooling API, is there a way to pass the Session Id using just URL parameters? I've seen a couple of Salesforce APIs that work when the Session Id is contained in a URL parameter: ...
3
votes
0answers
167 views

OAuth 2.0 JWT Bearer Token Flow giving a user hasn't approved this consumer error

I have setup a connected app and want to use the OAuth JWT. Based on my understanding of the salesforce documentation only preauthorized client can use this flow to get an access token. I have ...
2
votes
1answer
99 views

obtain refresh token with no redirect url?

Is there some website I can temporarily use as a redirect url? I am creating an app that has no web pages and I just need a refresh token so the app can stay connected pretty much forever to sales ...
8
votes
1answer
172 views

Using the Mobile SDK JS API, how can I determine if I have a refresh token already?

Background I currently have a hybrid iOS app that runs locally (index.html in the xcode app) that essentially provides a basic start page and login flow instructions that lead off to a force.com web ...
2
votes
2answers
46 views

Linking to agnostic login window?

I'm running into an issue where if a user's session is expired, next time they try to login, the login window is automatically pointed at their specific pod/mydomain. Not too bad for regular users, ...
4
votes
1answer
402 views

OAuth 2.0 JWT Bearer Token Flow

I'm trying to perform the OAuth 2.0 JWT Bearer Token Flow: https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm&language=en_US But I'm having this issue: ...
2
votes
1answer
129 views

Deploy SalesForce HTML5 app into device.emulator

I have created a HTML5 jquery mobile app as this link. I can see the sample in browser and its working fine. They also mentioned that same can be deployed in a mobile device after logging in with ...
3
votes
1answer
67 views

Receiving an Error for creating IOS hybrid application from a visualforce page

I try to create an IOS hybrid_remote application from a visualforce page, but when I run it, I receive the following error message: ...
0
votes
2answers
67 views

Getting “Not Authorized” when using fuelsdk client

I am doing exactly what the docs are saying: require 'fuelsdk' client = FuelSDK::Client.new({client: { id: "myclientid", secret: "mysecret" }}) campaign = FuelSDK::Campaign.new campaign.authStub ...
1
vote
1answer
76 views

Integrating php with Salesforce

I am asked to built a web application in php where the back end database is going to be Salesforce Objects. The scenario is that "users" (can be 10,000+) would register/log in to the application and ...
2
votes
1answer
127 views

Error: Janrain authentication

I followed the janrain Auth provider tutorial for social login implementation and getting following error: ...
3
votes
1answer
380 views

Salesforce Apex Data Loader GUI vs. Command Line login

(Crossposted from SO - http://stackoverflow.com/questions/21255608/salesforce-apex-data-loader-gui-vs-command-line-login) I'm trying to wrap up some Upsert functionality into a simple application ...
4
votes
1answer
107 views

Is it possible to setup a web tab in Salesforce which will go to this KB without needing to login using username and password?

We have a Web KB that is built in PHP. Is it possible to setup a web tab in Salesforce which will go to this KB without needing to login using username and password? I initially thought that SAML ...
9
votes
3answers
520 views

Why Salesforce.com logs the user in automatically after his/her session has been invalidated?

I'm logging in users via REST in my .NET application. For that in the WebBrowser control constructor I do the following: string server = "https://login.salesforce.com/"; var authURI = new ...
3
votes
2answers
226 views

Auth Provider redirect to Community Custom Domain

I have a salesforce community that has two URLs, one of which is a custom domain, e.g. 1) mysite.force.com 2) mysite.com When an Authentication Provider is used (in this case, Facebook) to login, ...
3
votes
1answer
159 views

Retrieve NT login username on Visual Force page - For non-logged users

I'm looking for an opportunity to retrieve the NT login username from a Visualforce page or from an Apex class. It would be HttpContext.Current.User.Identity.Name in C#. --Extension-- Our business ...
3
votes
1answer
2k views

How to integrate external web app?

After reading Force.com Canvas Developer's Guide, I don't think I have figured out a good way to integrate an external web app inside salesforce.com. Following are questions that I am not sure about. ...
7
votes
2answers
494 views

How do I setup access for a REST resource apex class using session ID

We have a REST resource apex class, and its sole purpose is to eliminate the problem of hitting Salesforce page view limits. The way it is currently setup doesn't seem to be eliminating this issue. ...
10
votes
1answer
206 views

Will I break a TOS by letting contacts login to a visualforce page I create

Will I be breaking any TOS by giving contacts a username (email) and password (generated) to sign into a visualforce page to access an app I build. I want to do this without buying any customer portal ...
0
votes
1answer
2k views

“unsupported_grant_type” error when trying to authenticate

I am using the following code to try to get an authenticate. This is in C#, using the RestSharp library: public string GetAuthToken(string code) { var client = new ...
5
votes
1answer
184 views

OAuth 2.0 handshake for Portal users

As described on OAuth for portal , initial OAuth handshake for authorization code gathering is changed. It should be used different domain URL Like, instead of : ...