OAuth is an open, standard, protocol to allow users to securely authorize web, mobile and desktop applications to access web services on their behalf. Salesforce supports OAuth 1.0a and 2.0.

learn more… | top users | synonyms

5
votes
1answer
16 views

Building a connected app without a production instance to store oAuth keys

I cannot find any reliable advice on the best approach to on oAuth secret keys when you do not have a production license. Background - I am creating an application that the community can use for free ...
4
votes
0answers
32 views

Lifetime of connected app record / tokens

With the recently announced plan to de-activate (and presumably at some point delete) inactive developer edition orgs, I've been wondering what's the lifetime of a connected app record created in a DE ...
0
votes
0answers
13 views

Why does SalesForce give a 404 error for my redirect_uri during Oauth

I am reading this page: https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_understanding_web_server_oauth_flow.htm I'm trying to do Oauth. Am I on the right page? I ...
0
votes
0answers
16 views

What does this mean? “other companies need to oauth their salesforce with yours” [duplicate]

I am trying to better understand this answer: How can others add my Connected App to their accounts? The answer given was: "The other companies need to oauth their salesforce with your so that ...
1
vote
0answers
8 views

Can verification code emails be redirected or forwarded to another email address?

We have multiple users that login to the same Salesforce1 App company wide. When at a new site with a new WAN IP, the verification code prompt generates. Can that code be emailed to a different ...
2
votes
1answer
58 views

Username/Password Auth flow using nforce with nodejs not working after Spring `16 upgrade

We have an app that is designed to run on a Heroku server that is creating new records in salesforce and also listening to streaming API topics to update our other datastore with changes in those ...
1
vote
0answers
28 views

Auth.AuthToken.getAccessToken is returning a null value

So I have an Auth Provider setup through Microsoft Access Control Service that was created using this tutorial. Whenever I try and call Auth.AuthToken.getAccessToken('0xxx0000000000x','Microsoft ...
3
votes
0answers
21 views

Using OAuth 1.0 encoded requests for external web service calls Error: signature_invalid

Please help me. I have a salesforce requirement that necessitates a callout from Apex to an external web service that receives signed OAuth responses. I am getting oAuth_token successfully. But ...
0
votes
0answers
34 views

Extend Salesforce oAuth Connected App Authentication

We need our Salesforce users to be able to download files from a server. The access to the files is determined by records in a custom object. The user would try to download these files from the ...
1
vote
0answers
11 views

Community user impersonation - Single signon

we have a community portal setup and we have a third application running which uses this communication portal for single signon. That is for end users ..they login to third party application by using ...
1
vote
2answers
19 views

JWT Oauth flow Confusion

I am having trouble getting the hang of the JWT Oauth flow and how it exactly works. Is a user supposed to enter their username on your website, which you then generate the JWT on your server and then ...
0
votes
0answers
20 views

SSO for community users using OAUTH / SAML

We have a SaaS that needs to be integrated with Salesforce community users. We are able to provide SSO for non portal users using SAML with SF as an identity provider . referred the following link ...
1
vote
0answers
22 views

Can we use something other than a Salesforce User Account to access the REST API?

We're accessing the Salesforce REST API with one of our regular Salesforce user accounts. That use changed his password, which is a good thing, but that invalidated our OAuth token, which meant we had ...
2
votes
1answer
24 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
2
votes
1answer
47 views

OAuth signature generation

I have some code generating OAuth signature and sending request to NetSuite. I reviewed all the parameters I send to NetSuite with their developers and they told me that I have some issue with ...
3
votes
1answer
39 views

Canvas app oauth with Partner Users post Winter 2016

I have a Force.com Canvas component inside an ApexHTML page, and it works just fine for regular user licenses, and prior to the Winter 2016 release, it worked fine for Partner level licenses ...
1
vote
1answer
21 views

error=invalid_client_id in Android native app

i get the following error when logging out of my native android app that i built with Salesforce Mobile SDK: error=invalid_client_id&error_description=client%20identifier%20invalid This results ...
1
vote
0answers
37 views

what does “invalid_grant” error with “inactive user” description mean?

The title is pretty much the whole question, I have seen the "invalid_grant" error in the Oauth2 flow alot of times and the description is always "expired access/refresh token" just like the webpage ...
1
vote
1answer
36 views

Options to save external oauth tokens in salesforce

Feels like a general question, but thought to put in discussion. Need to connect to an external system from salesforce and Oauth flow is ok. First though to store access_token, refresh_token, etc. in ...
1
vote
1answer
32 views

How do I create a new version of my Connected App?

I just joined a company that is working on a Connected App in Salesforce. The previous programmer set up the Connected App. He is no longer with our company. I am changing the app. I need to change ...
0
votes
0answers
78 views

Invalid assertion error in JWT Bearer Token flow

<OAuth><error_description>invalid assertion</error_description><error>invalid_grant</error></OAuth> This is the error I am seeing when I try to get an access ...
2
votes
0answers
117 views

JSForce Login Issue

I am using Jforce to connect to my developer account using oAuth. But i am getting error. This XML file does not appear to have any style information associated with it. The document tree is shown ...
1
vote
1answer
51 views

Where is the URL where I can Enable OAuth Settings?

I am trying to follow the directions here: https://help.salesforce.com/apex/HTViewHelpDoc?id=connected_app_create.htm I click "Setup" and I create a new app. But I do not see any link offering me ...
0
votes
1answer
29 views

I want to implement Oauth From class without using Pages and getting 302 URI MISMATCH ERROR. i HAVE USED THE FOLLOWING cODE

public class oAuth_Controller{ private auth_response rt; public pagereference auth_Step_1(){ String auth_url = 'https://login.salesforce.com/services/oauth2/authorize'; String params = ...
0
votes
1answer
75 views

Oauth Implementation [closed]

I need Oauth Implementation without User Credentials... using Connected App..Can Anyone Please help me out of this issue. I have created the following class but it is showing redirect uri mismatch ...
0
votes
0answers
128 views

Programmatically set access token on mobile sdk

I have an iOS application that uses the standard oAuth login method in the SalesforceMobileSDK-iOS library however I waste time and effort when developing as I have to log in all the time. Sometimes I ...
1
vote
0answers
20 views

Can we OAuth without overwriting the user's current login?

We’re currently working on integrating our application with Salesforce as a canvas app and hit a snag. Our application uses OAuth to allows a single user to grant our app access to multiple orgs ...
0
votes
0answers
19 views

Is it possible to deploy an Auth Provider using 'Execute Registration As' in a Change Set, without error?

Auth Provider is listed among the Components Available for Change Sets, and indeed, I can select them in my change set. However, in trying to deploy a few auth providers from a sandbox named DevPro ...
1
vote
0answers
465 views

400 Bad Request on RestTemplate POST request to Salesforce Oauth

I am trying to send a POST request to https://test.salesforce.com/services/oauth2/token to retrieve the oauth access token. The response is 400 Bad Request with no info. Here's the (Java) client code: ...
2
votes
0answers
70 views

Invalid token after OAuth on app in production, but not in development?

I'm having an issue where when I use an app in my developer's instance everything works fine. But when we create an exact duplicate of the app in our real production instance, the token's we are ...
3
votes
0answers
63 views

Salesforce API - have auth token; can't make API call

I'm having the same issue as this user in this question, but the answer provided doesn't work in my. I can connect, I can retrieve a auth token, but when I immediately make a call with it it fails ...
0
votes
0answers
28 views

Can't get expires_in field while using OAuth flow

I know it's a duplicate from this question: User-Agent OAuth Authentication doesn't provide expires_in data but no one has answered it, and I couldnt bump it by voting up becasue of my low ...
1
vote
1answer
120 views

List of All OAuth Errors? [closed]

Does Salesforce has a compiled list of all errors? (or at least those for the OAuth flow). I'm currently working on a Salesforce app where I keep getting new kinds of errors from new users, I never ...
0
votes
1answer
27 views

Can the same digital certificate be used by two different servers to connect as the same Connected App at the same time?

This is not a production scenario but I have a single Org with a single Connected App specified and connections to it are made using the JWT OAuth flow. The private key is used by two different test ...
2
votes
1answer
160 views

How to limit an access to specific REST endpoint?

Let's assume I have an REST ednpoint created: @RestResource(urlMapping='/CUSTOM_DATA/*') global with sharing class MY_CUSTOM_DATA Now I am going to create Connected App with Full Access scope, I ...
0
votes
2answers
73 views

How do I get an oauth token to experiment with SalesForce?

I am fairly new to Salesforce. I am writing a Java app that will make calls (either Soap or Rest) to the SF API. I think I need an oauth token to make the API calls? My company had a very simple PHP ...
0
votes
0answers
49 views

Difference between login with node.js library

I'm exploring some libraries to connect node.js with SFDC. I've found nforce and jsforce (Have tried only the first, actually). Reading the documentation, for the first one I have to set up a ...
1
vote
1answer
107 views

How to do programmatic OAuth flow between RestResource and Server Application

I have an external application that has a bunch of information to create new Lead objects. As well I've created a RestResource Apex class that is mapped to URLs on the salesforce instance for my ...
1
vote
0answers
188 views

Sandbox, oAuth & My Domain issue

We have developed AppExchnage app and is used connected app to integrate 3rd party system with SFDC. This app worked great till one of our customer have asked to install it on their sandbox. 3rd party ...
0
votes
1answer
55 views

Is it possible to log in as another user using OAuth / MobileSDK?

I see from the following help page that it is possible to login as another user when in the Salesforce Web UI. Salesforce help page: Logging in as another user However I'm developing a mobile app ...
1
vote
1answer
148 views

how to access a connected app from another org

I have created one connected app with API (Enable OAuth Settings) and it has generated consumer key and consumer secret. how to use this information to access the connected app from a different org? ...
2
votes
0answers
137 views

Auth. Providers Facebook Existing (community) User Linking

I'm currently adding a Facebook login to our customer onboarding process that we host through Salesforce. I have got it working for existing users already, if their Facebook email is the same as ...
1
vote
1answer
130 views

OAuth Token Management - Fuel SDK (PHP)

What are recommended best practices for reusing the OAuth token for the ExactTarget Fuel SDK? On my website once I get a valid OAuth token, I cache it for 15 minutes and use that same token for all ...
4
votes
2answers
198 views

Determine If Sandbox from Instance URL in Javascript

There's been a few questions around working out if an org is a sandbox or not, but typically these are done via Apex. I need to find out an org's type (only sandbox/prod - dev etc. don't matter) using ...
0
votes
1answer
272 views

Cannot access url https://login.salesforce.com/services/oauth2/token

My customer's webmaster uses REST API to create Leads in salesforce, from his website. Since yesterday he is getting a connection error. The password has not changed. I tried to make a call from a ...
28
votes
2answers
4k views

What causes a Connected App's Refresh Token to expire?

We have configured our web application to use OAuth2 with our SFDC Connected App. The connected app is configured to never expire the refresh token unless manually revoked. When an admin connects the ...
2
votes
2answers
773 views

Why Salesforce oAuth Username Password flow does not need security token?

While using SOAP API login call we need security token or the public IP should be whit listed. Why not when we use connected APP Username Password flow? If you compare security token implementation ...
2
votes
1answer
258 views

Returning Oauth token with REST API via PHP arrays when trying to send new contacts

In the salesforce REST API documentation, it tells how the system can give Oauth Tokens (https://code.exacttarget.com/apis-sdks/rest-api/v1/auth/requestToken.html ) But I don't seen any documentation ...
1
vote
3answers
214 views

How to use the REST API to get array from the Opportunity Object in JSON format from the Opportunity object using SOQL?

I'd just like to get an array of the opportunity data within Salesforce Visualforce so that I can manipulate it in Javascript. Below is the query that I'd like to use to pull in the array: select ...
2
votes
1answer
99 views

Maintaining session on external website using Canvas App

We are using OAuth web server flow. We need to know what is the best practice for maintaining session state within the external website. We do not want to use client side coding.