OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

learn more… | top users | synonyms

2
votes
2answers
48 views

Simplest way to call Apex class from external web server?

My use case is similar to Web-to-Lead: we collect user data, then add it to salesforce as new lead. I would like to upgrade to the API for higher reliability and fine-grained control. I believe I can ...
0
votes
0answers
27 views

Error oauth_problem when trying to Connect to Xero using method POST

Good day everyone, I am trying to connect to Xero using Salesforce Apex. I've found this link Apex for Xero and find it very useful. Everything is working well when I use PUT and GET method. The ...
3
votes
1answer
40 views

Does Salesforce support OAuth 1.0

Does anyone know if Salesforce supports OAuth 1.0 ? Our current solution is based on OAuth 1.0 and in the last week we started getting some issue creating such connection. Any feedback will help, ...
6
votes
1answer
60 views

Server to Server JWT Authentication Certificate management

I'm writing an application to sync some data from a service to salesforce and back. I'm working with a developer account and so far I was able to implement the bulk of the needed functionality merely ...
1
vote
1answer
32 views

(400) - Bad Request when requesting auth token using Wordpress

We're using some house-built wordpress plugins to create emails in SFMC from wordpress content. The original plugin used the Fuel SDK, which from what I can tell, does not support remote sending, only ...
0
votes
0answers
24 views

Avaya Communicator web is not working

We use Avaya communicator web to run our call center. When I open Avaya web extension (Google chrome) and click on login through Salesforce credential and login. I got an error message: “License ...
8
votes
1answer
64 views

OAuth interactions: do they count as API calls?

OAuth token grants and token authorizations are human interactions that take place in the browser. And token refreshes happen to be machine interactions. Do any of the typical OAuth interactions count ...
0
votes
0answers
22 views

Salesforce forget password issue while using oAuth

I have an heroku app which is using Salesforce oAuth for authorization. We are using Database.com Light user license. The app is working fine for authorization functionality. But while trying to ...
1
vote
1answer
28 views

Canvas Signed Request vs OAuth flow [closed]

What are the compelling reasons to choose one approach over the other? Is OAuth flow more secure than the Signed Request flow or is OAuth preferable only to have the external app invoke Salesforce via ...
2
votes
0answers
33 views

Canvas SDK and server side OAuth (.net)

I am attempting to connect our C# MVC application with Salesforce to use within Salesforce record pages (e.g. opportunity details) and a Visual force page. Using the Force.com-Toolkit-for-NET I can ...
1
vote
1answer
38 views

Automated testing of Salesforce Oauth flow breaking by “verify your identity in salesforce” process

I don't have the rep to comment on this question, so I'll have to add my own. I want to automate testing of the SF Oauth server auth flow. I can go through it manually, and everything works, but when ...
7
votes
0answers
119 views

OAuth within an iframe in salesforce

We are an ISV org and building out a new 'Text an Agent' feature. However the initial OAuth page is not being displayed in the iframe. In the picture below highlighted in the yellow box is the ...
1
vote
0answers
71 views

SSL certificate problem: unable to get local issuer certificate, curl_errno 60

I'm trying to integrate PHP script with Salesforce by following the example on the link: http://developer.force.com/cookbook/recipe/interact-with-the-forcecom-rest-api-from-php But I get the error ...
4
votes
0answers
70 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
0
votes
1answer
45 views

Oauth call to webservice

I am trying to call this web service via a wordpress plugin: https://na25.salesforce.com/services/apexrest/echosign_dev1/template/load/a1t31500002HmjV?email=VAR Adobe said I need to have a valid ...
2
votes
0answers
39 views

Salesforce Marketing Cloud/Exact Target API Authorization Endpoint for OAuth Authorization Code Workflow?

Does anybody know it? Their documentation discusses getting a user token here and here, but that's not what I need. The documentation clearly states on these pages linked about that "it is ...
0
votes
0answers
22 views

OAuth Access Token with web scopes not providing access to force.com web app

We are building a hybrid (not cordova) iOS app that uses the Salesforce Mobile SDK 4.0 to handle OAuth Access and provide accesstokens to load a force.com webapp. We load the iOS webview via the ...
2
votes
1answer
60 views

Salesforce OAuth Flow locale?

Trying to authenticate to a Salesforce community org (External Identity License) from an external application using OpenID / OAuth 2.0. Can the OAuth flow accept a language parameter in the header or ...
0
votes
0answers
15 views

How to get id_token (openid) from Salesforce using Mobile SDK

Goal is to authenticate from a native iOS app into Salesforce using Mobile SDK (using SFAuthenticationManager) and then obtain the id_token (open id token) that I can use to conenct to a third party ...
0
votes
0answers
32 views

How do I setup Salesforce to receive an 'Auth Callback Request'

I'm just getting started with API's and authentication. I'm probably just not translating this requirement/wording to common authentication knowledge. I don't know if there is something out of the ...
5
votes
1answer
33 views

Building a connected app without a production instance to store oAuth keys

I cannot find any reliable advice on the best approach to on oAuth secret keys when you do not have a production license. Background - I am creating an application that the community can use for free ...
4
votes
0answers
41 views

Lifetime of connected app record / tokens

With the recently announced plan to de-activate (and presumably at some point delete) inactive developer edition orgs, I've been wondering what's the lifetime of a connected app record created in a DE ...
0
votes
0answers
40 views

Why does SalesForce give a 404 error for my redirect_uri during Oauth

I am reading this page: https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_understanding_web_server_oauth_flow.htm I'm trying to do Oauth. Am I on the right page? I ...
0
votes
0answers
16 views

What does this mean? “other companies need to oauth their salesforce with yours” [duplicate]

I am trying to better understand this answer: How can others add my Connected App to their accounts? The answer given was: "The other companies need to oauth their salesforce with your so that ...
1
vote
0answers
10 views

Can verification code emails be redirected or forwarded to another email address?

We have multiple users that login to the same Salesforce1 App company wide. When at a new site with a new WAN IP, the verification code prompt generates. Can that code be emailed to a different ...
2
votes
1answer
91 views

Username/Password Auth flow using nforce with nodejs not working after Spring `16 upgrade

We have an app that is designed to run on a Heroku server that is creating new records in salesforce and also listening to streaming API topics to update our other datastore with changes in those ...
1
vote
0answers
60 views

Auth.AuthToken.getAccessToken is returning a null value

So I have an Auth Provider setup through Microsoft Access Control Service that was created using this tutorial. Whenever I try and call Auth.AuthToken.getAccessToken('0xxx0000000000x','Microsoft ...
3
votes
0answers
40 views

Using OAuth 1.0 encoded requests for external web service calls Error: signature_invalid

Please help me. I have a salesforce requirement that necessitates a callout from Apex to an external web service that receives signed OAuth responses. I am getting oAuth_token successfully. But ...
0
votes
0answers
80 views

Extend Salesforce oAuth Connected App Authentication

We need our Salesforce users to be able to download files from a server. The access to the files is determined by records in a custom object. The user would try to download these files from the server,...
1
vote
0answers
19 views

Community user impersonation - Single signon

we have a community portal setup and we have a third application running which uses this communication portal for single signon. That is for end users ..they login to third party application by using ...
1
vote
2answers
57 views

JWT Oauth flow Confusion

I am having trouble getting the hang of the JWT Oauth flow and how it exactly works. Is a user supposed to enter their username on your website, which you then generate the JWT on your server and then ...
0
votes
0answers
33 views

SSO for community users using OAUTH / SAML

We have a SaaS that needs to be integrated with Salesforce community users. We are able to provide SSO for non portal users using SAML with SF as an identity provider . referred the following link ...
1
vote
0answers
26 views

Can we use something other than a Salesforce User Account to access the REST API?

We're accessing the Salesforce REST API with one of our regular Salesforce user accounts. That use changed his password, which is a good thing, but that invalidated our OAuth token, which meant we had ...
2
votes
1answer
33 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
2
votes
1answer
112 views

OAuth signature generation

I have some code generating OAuth signature and sending request to NetSuite. I reviewed all the parameters I send to NetSuite with their developers and they told me that I have some issue with ...
3
votes
1answer
44 views

Canvas app oauth with Partner Users post Winter 2016

I have a Force.com Canvas component inside an ApexHTML page, and it works just fine for regular user licenses, and prior to the Winter 2016 release, it worked fine for Partner level licenses (...
1
vote
1answer
47 views

error=invalid_client_id in Android native app

i get the following error when logging out of my native android app that i built with Salesforce Mobile SDK: error=invalid_client_id&error_description=client%20identifier%20invalid This results ...
1
vote
0answers
73 views

what does “invalid_grant” error with “inactive user” description mean?

The title is pretty much the whole question, I have seen the "invalid_grant" error in the Oauth2 flow alot of times and the description is always "expired access/refresh token" just like the webpage ...
1
vote
1answer
52 views

Options to save external oauth tokens in salesforce

Feels like a general question, but thought to put in discussion. Need to connect to an external system from salesforce and Oauth flow is ok. First though to store access_token, refresh_token, etc. in ...
1
vote
1answer
32 views

How do I create a new version of my Connected App?

I just joined a company that is working on a Connected App in Salesforce. The previous programmer set up the Connected App. He is no longer with our company. I am changing the app. I need to change ...
0
votes
0answers
186 views

Invalid assertion error in JWT Bearer Token flow

<OAuth><error_description>invalid assertion</error_description><error>invalid_grant</error></OAuth> This is the error I am seeing when I try to get an access ...
2
votes
0answers
182 views

JSForce Login Issue

I am using Jforce to connect to my developer account using oAuth. But i am getting error. This XML file does not appear to have any style information associated with it. The document tree is shown ...
1
vote
1answer
63 views

Where is the URL where I can Enable OAuth Settings?

I am trying to follow the directions here: https://help.salesforce.com/apex/HTViewHelpDoc?id=connected_app_create.htm I click "Setup" and I create a new app. But I do not see any link offering me ...
0
votes
1answer
41 views

I want to implement Oauth From class without using Pages and getting 302 URI MISMATCH ERROR. i HAVE USED THE FOLLOWING cODE

public class oAuth_Controller{ private auth_response rt; public pagereference auth_Step_1(){ String auth_url = 'https://login.salesforce.com/services/oauth2/authorize'; String params = ...
0
votes
1answer
101 views

Oauth Implementation [closed]

I need Oauth Implementation without User Credentials... using Connected App..Can Anyone Please help me out of this issue. I have created the following class but it is showing redirect uri mismatch ...
0
votes
0answers
158 views

Programmatically set access token on mobile sdk

I have an iOS application that uses the standard oAuth login method in the SalesforceMobileSDK-iOS library however I waste time and effort when developing as I have to log in all the time. Sometimes I ...
1
vote
0answers
20 views

Can we OAuth without overwriting the user's current login?

We’re currently working on integrating our application with Salesforce as a canvas app and hit a snag. Our application uses OAuth to allows a single user to grant our app access to multiple orgs (...
0
votes
0answers
29 views

Is it possible to deploy an Auth Provider using 'Execute Registration As' in a Change Set, without error?

Auth Provider is listed among the Components Available for Change Sets, and indeed, I can select them in my change set. However, in trying to deploy a few auth providers from a sandbox named DevPro ...
1
vote
0answers
885 views

400 Bad Request on RestTemplate POST request to Salesforce Oauth

I am trying to send a POST request to https://test.salesforce.com/services/oauth2/token to retrieve the oauth access token. The response is 400 Bad Request with no info. Here's the (Java) client code: ...
2
votes
0answers
96 views

Invalid token after OAuth on app in production, but not in development?

I'm having an issue where when I use an app in my developer's instance everything works fine. But when we create an exact duplicate of the app in our real production instance, the token's we are ...