Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

learn more… | top users | synonyms

4
votes
1answer
26 views

Visiting the reset password URL after password has been reset

We have a custom branded community set up, this includes branding all 'native' functions such as password reset as well. We accomplished this by enabling Chatter Answers and customizing the Change ...
1
vote
1answer
43 views

simple API authentication

I'm looking for a way to connect to some Force.com API using only password + security token, username and URI in a similar manner SublimeText or realforce explorer do. All approaches I've found so far ...
1
vote
1answer
38 views

Cannot login through https://test.salesforce to the recently refreshed sandbox?

I have deployed mydomain in the production. But after refreshed the sandbox I can't login through https://test.saelsforce.com. And Prevent login from https://test.salesforce.com also unchecked. But I ...
2
votes
1answer
42 views

How to connect to Salesforce REST API without OAuth? How does Jitterbit do it?

So what I read everywhere is that, in order to connect to Salesforce via the API, you'll have to authenticate using OAuth. But this involves creating a Connected App, which is 'cumbersome' for normal ...
2
votes
1answer
26 views

Safari (iPad iOS) makes me log in every time, regardless of settings

Example of the problem: I log into Salesforce via my Safari mobile browser. Once logged in I select the "Home" tab in my org and click "Open in New Tab." Even though I'm opening from an existing, ...
1
vote
1answer
35 views

Error when validating External Data Source for SharePoint Online

I get the following error when trying to validate and sync my newly created External data source for SharePoint Online in Salesforce: "Status An unknown error occurred while accessing Files ...
0
votes
1answer
43 views

Authentication for SOAP requests

According to the documentation (https://code.exacttarget.com/apis-sdks/soap-api/using-the-api-key-to-authenticate-api-calls.html), it says to authentication in SOAP is done by sending the accessToken. ...
2
votes
3answers
86 views

When does it make sense to add a Connected App to a Managed Package?

I think I'm familiar with the difference between a connected app definition and its consumption: As the vendor, my Connected App definition lives by himself in a dev org forever: For the users, in ...
1
vote
1answer
30 views

How can I look up a user via their session id?

I have a custom link in Salesforce that passes the session id of the currently logged in user (over HTTPS). I'd like my application to be able to take the session id and look up the username of that ...
1
vote
0answers
17 views

Can I switch from a Community to Portal without logging in again

I have an existing force.com authenticated site and i am building a community at the moment. I have enabled a profile for both the authenticated site and the community. I can login to both of these ...
0
votes
0answers
21 views

Asynchronous Authentication mechanism fuel api

I am planning to use the c# fuel sdk. I have a question about authentication. We have a application in the marketing cloud which we third part’s will use. So my question on authentication is as ...
3
votes
1answer
38 views

SiteAuth UserAgent Test Class Creation

I'm new in creating SiteAuth userAgent test class creation. public SiteAuthControl() { if(!Test.isRunningTest()) { string userAgent = ...
2
votes
1answer
100 views

Static authorization token for REST API from external system

I am integrating an external system and they gave me an authorization token. I set the authorization token and it is working fine. I used SetHeader in HttpRequest. Now they want to send a REST ...
2
votes
1answer
42 views

Apache httpd module that behaves like mod_ldap?

I'd like to authenticate and authorize users with Salesforce rather than LDAP/AD. Is there a module out there that will do this? The web services secured by LDAP are not browser facing and use HTTP ...
0
votes
0answers
34 views

exacttarget auth failuere SSLException

We use ExactTarget for sending push notifications. More specifically, we use MessageContact API for sending push notifications. Before sending request to MessageContact API, we need to get ...
4
votes
1answer
60 views

Is login history only stored for 6 months?

Is login history only stored for 6 months? I appreciate it's in the security audit controls workbook: Because of the volume of data, login history is automatically removed after six months. If you ...
0
votes
0answers
96 views

salesforce1 single sign-on with adfs

I need to configure single sign-on with adfs for salesforce1. Therefore I configured Service Provider Initiated Request Binding on single sign-on settings to http redirect. But when I'm going to ...
1
vote
0answers
75 views

single sign on with adfs is not working for http redirect

When I'm set Service Provider Initiated Request Binding to http post it's working. But when I'm set Service Provider Initiated Request Binding to http redirect it's not working (It shows certificate ...
0
votes
1answer
53 views

In an internal SFDC Http Get from a VF Page, how do I authenticate for the redirected URL?

I'm trying to execute an internal http: GET from a VF page on a Knowledge Article so that I can parse the response HTML for some text in the page. (The Knowledge article looks like this: ...
0
votes
0answers
26 views

Can a user with Chatter Free or Identity user licenses be given permission for mutual authentication

Can a user with Chatter Free or Identity user licenses be given permission for mutual authentication.
1
vote
1answer
255 views

Getting remote access authorization error with Mobile SDK on iOS

When this happens during oauth on iPad, clicking the Not You link and reentering the username/pwd takes the user to a full screen web view of the Salesforce UI instead of my mobile app!!! Ugh! So I'm ...
0
votes
0answers
85 views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...
2
votes
2answers
80 views

Rest Call without using Connected App

We have a REST call that one of our systems is making to Salesforce but we do not have a Connected App set up. I cannot for my life figure out how to do this without a connected App that uses the ...
2
votes
1answer
85 views

@future invocation of REST service on same org - how to get accessToken?

I have a business requirement to attach a pdf document (visualforce rendered as pdf) to Notes and Attachments on a record when that record gets updated. Since we can't use getContentAsPDF() in the ...
6
votes
2answers
318 views

“Session expired or invalid” problem calling an @RestResource from Apex in Winter '15 preview; UserInfo.getSession returns null for Force.com Sites

Based on threads such as Calling Apex Rest custom web service from Apex code we have HTTP calls in our Apex code (contained in a managed package) back to the same org authorized like this: ...
0
votes
0answers
29 views

Any issues with this external login strategy?

I need to migrate portal user accounts to another solution and I'd like to do it as seamlessly as possible. As all other data is exportable, the primary issue is passwords. I've got functional code ...
3
votes
3answers
174 views

Making rest request with Oauth

I have all four Oauth token consumerKey, consumerSecret, accessKey and accessSecret. I need to make a request to a url from my apex code. Is there any library or a way to make this request. In java I ...
1
vote
0answers
35 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
1
vote
1answer
60 views

How to access the context in the canvas app using payload?

Based on the canvas documentation, i have setup the canvas app so that the authentication is OAuth. Also, I have been in the assumption that OAuth flow can be handled entirely through javascript ...
2
votes
3answers
89 views

EmailMessage Insert from an Authenticated Force.com Site VF Page throws INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY

I am building a typical help site where there are a lot of unauthenticated pages that the user can view like product catalog, help guides ...etc and couple of authenticated pages (My Cases, Case ...
2
votes
1answer
66 views

how would Force.com Canvas SDK and canvas method “verifyAndDecodeAsJson” work with non-java platform? Is there any workaround?

I am using signed request as the method to POST the data to the canvas app. The canvas app is the SAP BSP page. I now seeing a big road block that I am not able to retrieve the values from the context ...
1
vote
3answers
345 views

How can i login into salesforce from salesforce let's say through apex code or REST API class

How can I get the session id? Can I log in into Salesforce through Apex code? I have achieved similar functionality using Java but I am not sure how to achieve this using Apex.
2
votes
2answers
168 views

How to use JavaScript to detect if a user has a valid Salesforce session

I have a VisualForce page that it is possible to use offline because I am caching the page and other resources in the application cache. I have a button on that page that will execute a Visualforce ...
1
vote
2answers
48 views

Salesforce Mobile SDK Authentication flow issue

Created an android_hybrid Mobile app with Mobile SKD version 2.1 Added the remoteAccessConsumerKey at bootconfig.json as per my Connected App Update the oauthscope as "oauthScopes": ["api ...
3
votes
1answer
770 views

In what case should OAuth 2.0 Refresh Token Flow be used?

I am now using web server authentication flow along with refresh token flow in my system. Once a user granted a permission for the app to access, the app will request a permission, an access token and ...
1
vote
2answers
51 views

Allow access to certain sections of Customer Portal without login

Is it possible to give limited access to users in Customer Portal without logging in? (.e.g. access to the homepage and and some visual force pages). When the user tries to access say a Custom Object ...
2
votes
2answers
392 views

Authorization Required

I have created simple site that create a new case. Note : I have given the Site permissions Visualforce page,Controller ,Lead Object and Case Object. While execute the site Lead is created ...
2
votes
0answers
90 views

Authorization header missing from RestRequest headers map

I have a publicly exposed web service (Rest Apex) through Sites and I'd like to do basic authentication which I will manage myself. I noticed that when I specify Authorization: Basic ...
1
vote
0answers
61 views

Multiple Connected apps for oauth

I have a web application that has a mobile component. Both of them have Salesforce oAuth and use different connected apps. Sometimes users authenticate only via the mobile app and their credentials ...
3
votes
0answers
179 views

Invalid Signature Identity Provider Event Log for Self Signed Certificate SAML Sp Intiatied Web Browser SSO Profile

I am implementing Service Provider component of SAML protocol and I am aiming to achieve SP Initiated Web Browser SSO Profile.I have configured my domain I dint add my self signed digital ...
4
votes
1answer
55 views

What is the best authentication scheme for my REST application?

In my company we have created report data in Salesforce. I would like to make an internal web application that reads this report data via the REST API of Salesforce and visualizes this. I am now using ...
5
votes
1answer
131 views

Using LinkedIn for social login to salesforce

so i have been looking for solutions all over the web to try and find the solution to this simple question: how do i use linkedin as a social login method for any salesforce app/portal/community i ...
1
vote
0answers
61 views

Rails form that saves data to Salesforce and local DB

I have a user registration form that requires certain fields to be saved to different locations. Fields such as email and name need to be used to create a new salesforce object (Account). Email, ...
5
votes
1answer
262 views

frontdoor.jsp for Customer Portal user? How to authenticate a portal user with session id?

authenticate a customer portal using SOAP login() method and LoginScopeHeader receive SessionID in LoginResult object How can I use SessionID to redirect the user's browser to the customer portal and ...
0
votes
0answers
44 views

Asking to login again when application is terminated and launch it again

I have create a web view with frame size to which i am adding the sales force web view after launching the app in the first time it is asking the credentials and login fine But the problem is when i ...
3
votes
0answers
260 views

Rest API Authorization

We're trying to use the JSforce library (http://jsforce.github.io/) for javascript access to the salesforce api but we keep getting "invalid_grant" errors when trying to authenticate <script ...
5
votes
1answer
590 views

Passing Session Id using URL instead of HTTP headers

When invoking the Tooling API, is there a way to pass the Session Id using just URL parameters? I've seen a couple of Salesforce APIs that work when the Session Id is contained in a URL parameter: ...
3
votes
0answers
192 views

OAuth 2.0 JWT Bearer Token Flow giving a user hasn't approved this consumer error

I have setup a connected app and want to use the OAuth JWT. Based on my understanding of the salesforce documentation only preauthorized client can use this flow to get an access token. I have ...
2
votes
1answer
133 views

obtain refresh token with no redirect url?

Is there some website I can temporarily use as a redirect url? I am creating an app that has no web pages and I just need a refresh token so the app can stay connected pretty much forever to sales ...
8
votes
1answer
254 views

Using the Mobile SDK JS API, how can I determine if I have a refresh token already?

Background I currently have a hybrid iOS app that runs locally (index.html in the xcode app) that essentially provides a basic start page and login flow instructions that lead off to a force.com web ...