OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
0answers
9 views

Avaya Communicator web is not working

We use Avaya communicator web to run our call center. When I open Avaya web extension (Google chrome) and click on login through Salesforce credential and login. I got an error message: “License ...
1
vote
0answers
8 views

OAUTH 2.0 JWT How can I access request from client side to send JWT token to client application.

I am very new to the Oauth spec. I have done a lot of research but could not find the answer to what I should do. My task is currently my client application is using Salesforce as OAuth provider. So I ...
8
votes
1answer
54 views

OAuth interactions: do they count as API calls?

OAuth token grants and token authorizations are human interactions that take place in the browser. And token refreshes happen to be machine interactions. Do any of the typical OAuth interactions count ...
0
votes
0answers
20 views

Salesforce forget password issue while using oAuth

I have an heroku app which is using Salesforce oAuth for authorization. We are using Database.com Light user license. The app is working fine for authorization functionality. But while trying to ...
1
vote
0answers
14 views

Google as OAuth2 Provider to Log In from Mobile Device

I'm trying to login to Salesforce in a Xamarin app through Google in order to get a valid bearer token to interact with my custom Salesforce REST API. It works just fine if I point Xamarin.Auth to ...
0
votes
1answer
35 views

About createUser method from Auth.SamlJitHandler

for the implementation of Auth.SamlJitHandler I created a person account A and a User account U which are connected using U.RoleId = A.PersonContactId. I can not avoid this step. This makes the ...
-1
votes
0answers
11 views

Salesforce OAuth 2.0 JWT Error: invalid_client: invalid client credentials [duplicate]

I am trying to implement Salesforce OAuth 2.0 JWT Bearer Token Flow in Python but I keep getting " {"error":"invalid_client","error_description":"invalid client credentials"}" back from ...
3
votes
0answers
27 views

Google OAuth Auth. Provider doesn't ask for offline access

I set up an Auth. Provider for Google Apps as explained in the Salesforce Help, but Salesforce doesn't seem to ask for offline access so I have to go through the "connect" flow every hour, when I want ...
0
votes
0answers
9 views

Auto Resize Canvas app after OAuth login

I am using OAuth (vs. SignedRequest) authentication for my Canvas App (an external web app). I am displaying my Canvas app in Visualforce Page. I need help for 2 things. How to get user details like ...
1
vote
1answer
22 views

Rest API returns No_Access error to System Admin for userinfo call

We have used oAuth in our manage package. This package have oAuth flow and it works fine for all client except one. When we call /services/oauth2/userinfo it returns 404 (not found) — No_Access ...
0
votes
0answers
18 views

How to get oauth2 access and refresh tokens in JSON format

Problem I am trying to connect to an external api using oAuth2, and at the moment have the following code I am running from the Execute Anonymous Window. I keep getting a 401 error and I think the ...
1
vote
0answers
28 views

Implementing the self-authorization flow of signed request authentication for a canvas app

I'm working on a canvas app which will allow an existing web app to be viewed through canvas. I have the app working with Signed Request authentication, which works fine when permitted users is set ...
0
votes
0answers
12 views

Handling INVALID_SESSION_ID from the developer end. [duplicate]

In our mobile app, customer is trying to add Lead and Contact to Salesforce and he is getting the below error [{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}] And we are ...
1
vote
1answer
35 views

Salesforce OAuth 2.0 JWT Bearer Token Flow with PHP

Anyone can help me with JWT Token Flow returning an error of {"error":"invalid_client","error_description":"invalid client credentials"} Why am I getting this error ? I suspect that I uploaded a ...
0
votes
1answer
7 views

Visualforce page accessible for other Salesforce profiles integrated with my software

I have my software that is sending data to Salesforce using REST API. This is for now only happening for my Salesforce Profile. I want other Salesforce profiles to be able to integrate with my ...
1
vote
1answer
50 views

Salesforce SAML Assertion - Failed: Missing Consumer Key Parameter

We are developing native mobile app where we are using oAuth token for Salesforce API access. We want to have SSO integrated with some SSO provider like Okta which generates SAML response,where we are ...
0
votes
0answers
26 views

OAuth Named Credential Callout Failure

I have created a named credential that points to the Microsoft graph API. My credential has been authenticated successfully but when I try to use it from Apex it fails. I am unable to debug , The ...
0
votes
0answers
19 views

Salesforce Authorization Error while testing the Test-Only Initialization URL for “Microsoft Translator - Text Translation” API

I am trying to create the Salesforce Auth Service Provider of type Microsoft Access Control Service so that I can do the REST API call to "Microsoft Translator - Text Translation" API. I have done ...
0
votes
0answers
22 views

SoapUI - Community User Login Setup

I want to setup some tests using the SoapUI Tool. The first part of my test involves getting a token for a community user. Since the OAuth flow mechanisms are different for a community user, how can ...
0
votes
1answer
37 views

OAuth worked initially, but failed with 401 on the next day & subsequent

I'm working from https://developer.salesforce.com/page/Integrating_Java_Spring_Apps_on_Heroku_with_Force.com_REST_APIs On the first day, I got everything to work with localhost, so if I opened ...
-1
votes
1answer
41 views

When to use username & password flow to obtain a token

One of ways to get an access_token to use with SFDC Rest Api is to use the Username and password flow, where you use both of these to get an access_token. Its documented here: ...
0
votes
0answers
15 views

SAML assertion via an oAuth2 handshake

I am trying to implement third party app. The concern I am facing is that can we get SAML assertion via an oAuth2 handshake
1
vote
1answer
42 views

Connecting to Salesforce using AngularJS

newb here. I am trying to log in to a Salesforce account using AngularJS ForceNG and pull the data out of an object so I can post it on an Ionic page. I want to hard code the login and password, ...
0
votes
0answers
7 views

Salesforce server change - tied to refresh token?

We use Salesforce refresh tokens to access the Salesforce API on behalf of our users. To determine the API endpoint URL to access, we'll examine the response received when generating an access token. ...
2
votes
1answer
23 views

Enable Google Login for Communities

in my developer org i have set up a community. I also have set up google as auth provider. The auth process is working great for sales cloud users. Speaking of community users there is the problem, ...
1
vote
1answer
61 views

(400) Bad Request when attempting to use refresh tokens

Our application interacts with our clients' Salesforce instances using the REST API and refresh tokens we have stored on our database. Every API request will use that refresh token to get an access ...
4
votes
0answers
58 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
2
votes
2answers
31 views

Finding the Salesforce API URL after OAuth

I have completed OAuth for a Salesforce customer, and I have their access_token and refresh_token. But how do I know what API URL to call on their behalf? I.e. ...
3
votes
2answers
123 views

session id or oath token, they not interchangeable?

Very new to Salesforce development. I used a connect app to get Oauth security token in a plugin. I am trying to call an Adobe Salesforce web service that needs a session ID. When I run my plugin I ...
3
votes
1answer
53 views

Authorization for APEX Webservice

We're writing an internal Apex REST webservice to accept POST requests from an external system to call. The kink here is that we cannot control the process in which the external system calls our ...
0
votes
0answers
26 views

Configuring a Named Credential for Oauth 2.0 callouts from Visualforce

I am trying to set up a Named Credential so that I can make callouts from a Visualforce controller to an external web app using Oauth 2.x. The web application is called Procore. I'm not sure how to ...
3
votes
2answers
116 views

No_Oauth_Token: Access token was not returned

Unable to access sharepoint via Files Connect. A user with System Admin Permission created. Enable Files COnnect in my org. Created a permission set to access Files Connect Online and assigned to ...
1
vote
1answer
32 views

How to write Salesforce data using Apex into Google Spreadshee

I need to write data into Google Spreadsheet using Apex but i am not getting pointers. Can any one help me out on below points - 1) How to authenticate Google Account from Apex code? 2) How ...
0
votes
0answers
30 views

Two factor authentication from api

I have enabled two factor authentication on my org and now using authentication app to create time based token and login via salesforce UI. Now I want to do same thing through OAuth 2.0 ...
1
vote
1answer
24 views

Oauth2.0 User Password flow combined with delegated authentication

When using the OAuth2.0 User Password flow and having Delegated Authentication Single Sign-on enabled, will Salesforce by default use the Delegated Authentication to validate the user/password?
0
votes
0answers
32 views

Unauthorized endpoint error even though the remote site has been added

I'm getting the following error authenticating with the UN/PW oauth2 flow (I redacted the actual domain name): Unauthorized endpoint, please check Setup->Security->Remote site settings. ...
1
vote
0answers
32 views

OAuth - getting invalid JSON in response of exchange code

In OAuth 2.0 flow, I am getting invalid JSON in the response when I exchange authorization code for access_token. I am getting following JSON - { "access_token": "<ACCESS_TOKEN>", ...
0
votes
1answer
23 views

Wrong instance url while generating the token for OAuth 2.0 authentication

I am a novice in salesforce. I have access to multiple sandbox instances of salesforce. I am trying to do an OAuth2.0 authentication and call some rest api. But when I request for the token, in the ...
0
votes
1answer
47 views

Username-Password OAuth Authentication is working with the community users?

I need to configure Username-Password OAuth Authentication to get salesforce data with the REST API through a community users. Is is possible to do that?
1
vote
2answers
38 views

Regarding OAuth2 class

I am unable to find official guide containing the description (methods, properties etc) of this Salesforce inbuilt class (OAuth2). Can someone let me know ?
2
votes
1answer
100 views

Can my Connected App be forced to use the stored redirect_uri?

I would like to use the Amazon Alexa voice service to create a voice interface for Salesforce. But I've run into problems. I am reading here: ...
4
votes
0answers
39 views

Custom Domains in web authentication flow

I'm running into authentication issues with users who are attempting to sign into Salesforce on our product using a custom domain (Oauth user-agent flow). From the Salesforce web signin page, the ...
2
votes
2answers
82 views

Determining How/When to Add Consumer Key to OAuth Flow

I hoping to get some best practice related to using a consumer key with a native iOS app and Salesforce.com. The following is relevant to this scenario: A Managed Package (MP) has been created and ...
1
vote
1answer
76 views

oAuth2 auth from AngularJS for Chatter API with AngularJS

I have an AngularJS app in a VF page which will be interacting with the ChatterAPI. Obviously just making a request with Resource returns a 403 since I am not authenticated. The only info I can find ...
0
votes
1answer
40 views

Problem getting AUTH Token

I'm trying to get an Auth Token (using PHP) and having trouble getting back the authorization code so I can make the next call and get the Auth Token. I set up a connected APP in the console and have ...
2
votes
1answer
104 views

oauth consumer key and/or signature not included in request parameters or authorization header

I am calling a REST Api https://www.gliffy.com/products/online/api/apidocs/rest/#oauth which needs oAuthkey and Password. Here is my Class public with sharing class DetailButtonController { public ...
0
votes
0answers
139 views

invalid grant/Authentication Failure with curl

Trying to get my head around the salesforce REST API. I wanted to get a session id to use for subsequent requests. I followed the documentation and tried to use curl for this as seen below. In order ...
1
vote
1answer
110 views

Marketing Cloud oAuth and Refresh token issues (RefreshToken Expires after first use)

Ok.There are questions about this but no answers. I am finding with ExactTarget the refreshToken expires when it is used (Which then I see no reason to use it at all since we would be using clientId ...
0
votes
0answers
21 views

Misbehaving Rest API in production for inbound calls leveraging oauth2 — receiving 403

I have a client that is having problems accessing custom SF Rest API. Login is successful using oauth2 token (services/oauth2/token) with grant_type = password. Attempt to access custom REST API ...
3
votes
0answers
19 views

Any clue as to why I am not able to use heroku environment variables in my jsforce auth function?

So I'm part of a team working on developing an a web app for our client, who uses salesforce as their database. We are using node.js on heroku to act for the server side code. The front end is ...