OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

1
vote
0answers
9 views

OpenID Connect login returns Remote Error & ErrorDescription=427

To provide authentication via the external OAuth2 authorization server, I'm trying to configure Auth. Provider as an OpenID Connect type. After logging into the external server, I got an error page, ...
0
votes
0answers
15 views

Could not get Access token using Auth.AuthToken.getAccessToken in custom Registration Handler

Recently I follow https://help.salesforce.com/HTViewHelpDoc?id=sso_provider_facebook.htm&language=en_US to set up a facebook auth.provider, and put the callback URL in my facebook app. and the ...
-1
votes
1answer
20 views

Oauth Implementation from Salesforce to Salesforce [closed]

I want Ouath implementation without credentials using access token..can any one please post the code ... I dont want to use user name and password i prefer clientId and Client Secret...
0
votes
1answer
31 views

client_secret compromised, options?

We have no evidence to believe, but are acting as if, the client_secret has been compromised on our Salesforce OAuth 2 App. I was wondering what our options are: is it possible to generate a new ...
-1
votes
0answers
23 views

SCript Thrown Exception [closed]

Class.JSONObject.JSONTokener.next: line 1049, column 1 Class.JSONObject.JSONTokener.nextClean: line 1126, column 1 Class.JSONObject.<init>: line 157, column 1 ...
1
vote
0answers
12 views

Connected App -Oauth Usage details not getting captured

I have a custom Connected App configured in my org.We have an Integration profile with limited access and an Integration user(dummy user created just for connected app) .We have a 3rd Party ...
-1
votes
0answers
14 views

Saml Bearer Assertion Flow

Salesforce and a 3rd party program both using SSO. The 3rd party created an api that I want to call from within salesforce. What is the best way to pass the SAML assertion to the API. Not sure if ...
1
vote
0answers
120 views

You are not authorized to access this API

You are not authorized to access this API Error 403 PUT I am getting this response when i am updating non admin users signature in gmail using email settings api. The following code is working ...
1
vote
1answer
15 views

How do I see/change the Oauth2 callback URL for a connected app?

I created the connected app and everything is working fine. I am able to generate Oauth2 tokens and query objects. However if want to see/change the Oauth2 details like callback URL, I cannot see it ...
2
votes
0answers
30 views

Invalid token after OAuth on app in production, but not in development?

I'm having an issue where when I use an app in my developer's instance everything works fine. But when we create an exact duplicate of the app in our real production instance, the token's we are ...
1
vote
2answers
54 views

How do I get a long-term API OAuth token?

I have some scheduled tasks that need to run for my Marketing Cloud app, and the 20-minute expiration on tokens causes problems. I can refresh, but it has to refresh a lot. And if two processes both ...
1
vote
0answers
32 views

How to enable SSO on mobile using Salesforce1

I need to launch another mobile app on the same mobile device from Salesforce1. I have implemented that functionality.It is currently just launching the other app by invoking the app specific URI. Now ...
0
votes
1answer
33 views

Integrating SFDC with SAP via ADFS

We are integrating SFDC and SAP via Lightning connect 2.0 and we are planning to use OAUTH 2.0 as authentication protocol. Net weaver gateway is exposing SAP data as a ODATA service. Here is what we ...
0
votes
0answers
12 views

How to use force-springsecurity-22.0.8 via a proxy server

I am using this sample project to access Salesforce resources with Oauth2 authentication. It works fine when I run it over an internet connection that does not use a proxy server, but it fails with a ...
2
votes
1answer
42 views

REST API: “INVALID_SESSION_ID” with valid token

I'm having some trouble accessing API endpoints using a valid token that I just got from the OAuth process. I'm passing data as I think I should and am trying to access any endpoint at this point ...
0
votes
0answers
16 views

How can I get SalesForce Quick Start to log in?

I am following these "quick start" instructions for using SalesForce API. When I try to run the application, it fails with: [LoginFault [ApiFault exceptionCode='INVALID_LOGIN' ...
1
vote
1answer
61 views

Accessing Named Credentials' data in apex

Is there a way of accessing the data (exact fields) stored in Spring 15' Named Credentials from apex? For example the username, password and endpoint link fields? And I don't mean for the callout, but ...
1
vote
1answer
47 views

How to issue/send access token from apex page to connected app

We have implemented 2 OAuth flows between our app and SF where SF is auth provider - Web Server and Username and Password Now we have use case where user is signed on SF and has to invoke our ASMX ...
1
vote
1answer
35 views

Validate if OAuth user has (correct) Connected App installed/setup

We allow our Salesforce customers to login to our own Salesforce Service Community by using OAuth ("Login with Salesforce"). To do so, we created in our customer's org a Connected App, set the ...
2
votes
1answer
51 views

Unable to fetch authorization code from Summer 15 Org

Created a connected app on the hub org In the connected app Enabled OAuth Settings Provided full access and Perform requests on your behalf at any time (refresh_token, offline_access) oauth scope. ...
0
votes
0answers
41 views

how to query salesforce to collect data from multiple SFDC orgs?

I'm Trying to access another SFDC org and retrieve their data through the QUERY API. to access the data the information I need is: Username,Password,Token,ClientID and ClientSecret. I'm connecting ...
3
votes
1answer
24 views

Not getting the refresh token in OAuth

I'm using this: ...
1
vote
0answers
18 views

Get Access Token in AuthProvider RegistrationHandler

I have a custom class that implements Auth.RegistrationHandler This class is used a a registration handler for my Salesforce Auth. Provider (basically "Login with Salesforce" in another Salesforce ...
1
vote
2answers
65 views

OAuth2 Connected Apps getting ClientID and Secret

I've got OAuth2 working in a small project using JSForce(fantastic library). I can authenticate and all seems to work fine. The problem is, how does this work on a large scale? The app I am planning ...
0
votes
1answer
42 views

Authorize Endpoint URL and Token Endpoint URL in Open ID Connect

I need to create an External Data Source to connect to third party system and I am doing it with OAuth mechanism.I need to create Authentication Provider with type as Open ID Connect before doing it.I ...
1
vote
0answers
44 views

Best way to parse “stringified” (sub-)Map<String,String>

In my Auth Provider RegistrationHandler, I received an instance of the Auth.UserData class, filled with users data (in this case it is an external Salesforce user). The usage is very comfortable, as ...
2
votes
2answers
32 views

Connected App OAuth scopes settings have no effect

I have a Connected App in Org A, which is used to let their users log into Community B in Org B. The registration handler works fine, but only the OAuth scopes inside the Connected App are not ...
2
votes
2answers
39 views

Accessing salesforce REST-API through greasemonkey script

Is it possible to query salesforce through its REST-API using a greasemonkey/tampermonkey script only ? If yes, can someone give me a hint on howw to achieve that. I have been going through ...
1
vote
0answers
41 views

Correct redirect_uri for Google Sheet (not web app)?

We have several Google Sheets that interact with Salesforce, all now broken with ouath1 deprecation. I've found lots of examples of oauth2 for web apps, but I can't make it work with a Google sheet. I ...
3
votes
0answers
34 views

Adding a callback URL to an existing connected app

I have a connected app I created a long time ago. I would like to add an additional callback url to the app. Before I do that, I need to be 200% sure that existing users that are already connected to ...
3
votes
1answer
92 views

OAuth web server flow - login redirect loop?

We have an OAuth Web Server Flow setup in our SF managed package that is used to authenticate our web service with Salesforce for API access. When a user first opens our app in SF, a call is first ...
0
votes
1answer
40 views

JsForce(nodejs) for the Oauth, its not returning RefreshToken

Using JSForce(nodejs), I create a new connection were it will returns accesstoken,Instance_URL and refreshToken and Userdetails. The thing is it returns accesstoken, Instance_URL and Userdetails but ...
1
vote
0answers
10 views

How do I contextualize the Fuel SDK to retrieve event data for a specific user?

Is it possible to get the Ruby FuelSDK to query for, say, the subscribers or events of another user who has installed an app? Do I simply need to set the internal_token? fuelsdk_client = ...
1
vote
2answers
95 views

Does the legacy token aka internal oauth token ever expire?

https://code.exacttarget.com/app-development/marketing-cloud-apps/single-sign-on.html describes the request->user->internalOauthToken as: An OAuth2 token that can access Email SOAP API. It ...
3
votes
2answers
141 views

OAuth Access Token Expiration

I have read many places that the access token session length is controlled by the client application and will expire "from time to time", but I cannot find a way for my application to calculate the ...
1
vote
0answers
23 views

Is it required to change OAuth endpoints based on custom domain?

We have done integration between .net application and Salesforce. Currently we are using the primary OAuth endpoints from .net application for authentication: For production: For authorization: ...
3
votes
0answers
136 views

Invalid Assertion error in OAuth 2.0 SAML Bearer Assertion Flow

I am trying to generate an OAuth token with the SAML 2.0 Bearer Assertion flow in Salesforce.com, but receiving invalid assertion error: { "error_description": "invalid assertion", "error": ...
0
votes
0answers
51 views

Restforce using wrong OAuth base URL during reauthentication?

I'm using Restforce to authorize via OAuth2 in a Rails app. After the oauth_token expires, when creating a new Restforce client, during the attempt to re-authorize via Restforce's authenticate!, it ...
1
vote
1answer
85 views

how to access a connected app from another org

I have created one connected app with API (Enable OAuth Settings) and it has generated consumer key and consumer secret. how to use this information to access the connected app from a different org? ...
3
votes
2answers
168 views

Possible Username-Password OAuth Authentication Flow security issues?

We have chosen to use "Username-Password OAuth Authentication Flow" over the "Web Server OAuth Authentication Flow" and "User-Agent OAuth Authentication Flow" because we need to login silently, ...
1
vote
0answers
104 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
2
votes
2answers
54 views

Total Newbie. Cannot log into my first test app using grant_type=password

I have set up a test application on my developer instance of Salesforce. I have a client_id, client_secret and I have the necessary security token appended to my password. I am trying to authenticate ...
0
votes
0answers
25 views

Multiple machines long term REST API access using the same Salesforce community user account

I would like to have a program such that it will ask for Salesforce community users to login via OAuth2.0 web server flow once to obtain refresh & access token, so that I can access Salesforce ...
0
votes
1answer
178 views

Need help with getting auth token from Postman

I need some help with getting Auth Token through Postman. Based on https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_username_password_flow.htm&language=en_US I have constructed a ...
-1
votes
2answers
85 views

Username authentication oauth flow android

I am new salesforce and have good knowledge of java and android development.. Since the Default authection of salesforce template app uses web view I want to do it without using web view through some ...
3
votes
1answer
74 views

Offline authentication

We are developing a windows-based application that can work either offline or online. When online, we want to use Salesforce to authenticate our users (Portal Users) and consume some REST services ...
4
votes
1answer
77 views

Logging in the SalesForce with a PhoneGap APP with a Authenticated Website User

I developed a PhoneGap Connected APP that displays SalesForce logged user account details. Accessing as Administrator can access the information I need. accessing as a regular user (Authenticated ...
19
votes
2answers
2k views

What causes a Connected App's Refresh Token to expire?

We have configured our web application to use OAuth2 with our SFDC Connected App. The connected app is configured to never expire the refresh token unless manually revoked. When an admin connects the ...
1
vote
0answers
61 views

Community with external auth provider

We are trying to configure a community site with external auth provider. We have a c# service that connects between an SSO service we have that is working with open id protocol and salesforce. This ...
0
votes
0answers
54 views

Why isn't my redirect uri working with facebook toolkit?

I am attempting to integrate Salesforce with Facebook using the Facebook Toolkit and am running into an Authorization Required error. After much research, I'm stumped! I am getting this error: { ...