OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
0answers
3 views

Logging partner community user in via oAuth from rest console

I have set up a community and wish to access it via oAuth. Using the flows mentioned in the documentation I have no issues. Everything is good. However I want to be able to login and then access my ...
2
votes
1answer
22 views

Salesforce1: Open current object in safari browser with login

We are developing mobile friendly visualforce page. Due to the UIWebview issues with iOS7.0/7.1 there are some components which does not work as expected. Though 7.1 update fixed a lot of issue, still ...
3
votes
1answer
40 views

Using Restforce gem with SalesForce API and Oauth 2.0

I'm trying to use Restforce (https://github.com/ejholmes/restforce) to set up integration with my Rails app to SalesForce's API using Oauth 2.0. Restforce describes the initialization process as ...
2
votes
0answers
15 views

RemoteAccessAuthorizationPage Not Coming after login

I am using User-Agent OAuth flow for authenticating a community user so that he can access a native android client built using MobileSDK. Also, I have a custom login page for community which redirects ...
1
vote
2answers
53 views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
0
votes
1answer
28 views

Does OAuth token (from mobile SDK) still work in local browser?

I'm working on the Mobile app development. Here is my issue: We have got a token through the OAuth flow in App using SDK. There is a link in app named "user info", user tap that link and open a ...
1
vote
0answers
13 views

Clipped oauth response in user-agent flow?

I'm developing an app that authenticates to salesforce using the oauth2 user-agent flow. It works fine most of the time, but in the last fe days, sometimes I get clipped data in the url fragment. It ...
2
votes
1answer
30 views

obtain refresh token with no redirect url?

Is there some website I can temporarily use as a redirect url? I am creating an app that has no web pages and I just need a refresh token so the app can stay connected pretty much forever to sales ...
2
votes
0answers
59 views

OAuth 2.0 JWT Bearer Token Flow

I'm trying to perform the OAuth 2.0 JWT Bearer Token Flow: https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm&language=en_US But I'm having this issue: ...
1
vote
0answers
58 views

Calling REST API in Canvas with OAuth Webflow (GET)

I am developing a canvas application. For various reasons, I am hosting my application on a static host and use services as back-end. Therefore I am simply using OAuth Webflow (GET) instead of Signed ...
0
votes
1answer
21 views

Sales Force Rest API: Issue with OAuth2.0 Login

Request End Point: https://login.salesforce.com/services/oauth2/token grant_type=password&client_id=xxxx&client_secret=xxxx&username=xxxx&password=xxxxx Response { id: "" ...
1
vote
1answer
23 views

Passing Login info into Force CLI

Is it possible to hack the Force CLI to pass login info in from the command line? Looking at the code here, you can see that its using oauth2 to get a token. Maybe there is a URL hack to pass the ...
2
votes
1answer
57 views

Which OAuth2 grant type is appropriate for background job processing?

If I want my application to process jobs and send API REST requests to my APEX endpoints, which OAuth2 authorization/grant method should I use? If I use authorization_code, then the browser needs to ...
3
votes
2answers
78 views

OAuth 2.0 (or similar) without security token

This article about oAuth 2.0 says , that user must provide security token to log in. Can i somehow disable usage of security tokens? I don't want my users to perform unnecessary operation. Or may be ...
0
votes
2answers
146 views

Hello World Custom Rest Api endpoint not working

Salesforce provides a example of how to define a custom rest endpoint and how to make calls to that endpoint. It is not working for me. Why? I have successfully retrieved an OAuth token that I have ...
3
votes
1answer
95 views

Store Salesforce credentials

I'm building an application in PHP and MySql that will allow people to sign in with their Salesforce ID, Password and Token and then they will receive a report based on their contacts and ...
3
votes
0answers
273 views

“Unauthorized endpoint, please check Setup->Security->Remote site settings. endpoint = https://login.salesforce.com/services/oauth2/token”

I am following web-server authorization flow for establishing the connection between one org to another org. as a 1st step i have get authorization code,when i am proceeding to 2nd step, getting above ...
10
votes
1answer
53 views

How workbench is able to log into Salesforce with OAuth

I have been trying to fiddle with OAuth user-agent flow and understand that you need to have a connected app defined in Salesforce. You would then use the client secret from that in your app to be ...
3
votes
0answers
347 views

refresh_token flow always returns expired access/refresh token

I'm trying to get the refresh_token flow working to obtain a new access token but I always get this error: {"error_description":"expired access/refresh token","error":"invalid_grant"} I'm ...
0
votes
1answer
32 views

What is OAuth 2.0 and what is the difference between Oauth Authentication and Authorization

Please give me a brief idea about the Oauth authorization and authentication and what are the different ways of using OAuth.
9
votes
3answers
110 views

Why Salesforce.com logs the user in automatically after his/her session has been invalidated?

I'm logging in users via REST in my .NET application. For that in the WebBrowser control constructor I do the following: string server = "https://login.salesforce.com/"; var authURI = new ...
2
votes
1answer
109 views

How to refresh a token retrieved from the Auth.AuthToken class

A Salesforce instance is configured so that users can log in using OpenID Connect and their Google credentials. I am trying to access the token provisioned by the login via google to make callouts to ...
0
votes
0answers
88 views

Getting a 400 error when using OAuth

Exception: https://login.salesforce.com/services/oauth2/token: curl= (OK); http=400 (Bad Request) I am getting this error when a few users are trying to use my page. But other users are fine. Is ...
3
votes
1answer
24 views

Removal of OAuth 2.0 package

I have released managed package for my OAuth 2.0 connected app. My partners that are working on SF have installed the package and we are working fine. What I am wondering about. In case that this ...
2
votes
1answer
279 views

How to integrate external web app?

After reading Force.com Canvas Developer's Guide, I don't think I have figured out a good way to integrate an external web app inside salesforce.com. Following are questions that I am not sure about. ...
0
votes
1answer
511 views

“unsupported_grant_type” error when trying to authenticate

I am using the following code to try to get an authenticate. This is in C#, using the RestSharp library: public string GetAuthToken(string code) { var client = new ...
1
vote
1answer
43 views

Is it possible to enalbe SOAP with OAuth for Group and Professional editions?

Does anyone know is it possible to enable SOAP API for Group and Professional editions with OAuth 2.0 (connected app) authentication? I cannot find this info directly in the documentation. What ...
4
votes
1answer
103 views

OAuth 2.0 handshake for Portal users

As described on OAuth for portal , initial OAuth handshake for authorization code gathering is changed. It should be used different domain URL Like, instead of : ...
2
votes
2answers
74 views

How do I set up SSO using a specific salesforce org as identity provider using OAuth

I have a non-salesforce web application, and I want to secure it so only users of my SF org can use it. The data that I want to protect is stored in the web app, so my SF org should only serve as a ...
1
vote
1answer
471 views

OAuth 2.0 username-password flow: Is the access token long lived?

I am a newbie to Salesforce. I am planning on implementing username-password OAuth 2.0 flow in my iOS app. I am getting access_token after calling https://login.salesforce.com/services/oauth2/token ...
4
votes
3answers
81 views

Is there an official “Log in with Salesforce” image?

Salesforce allows an external application to authenticate using OAuth. Other providers of this service offer official button images that you can embed in your application to launch this process e.g.: ...
4
votes
1answer
169 views

Canvas Signed Request not being processed correctly

I currently have a canvas app deployed across multiple orgs. This app uses signed request to authenticate a user. Along with some visualforce pages. Just this morning the signed request suddenly ...
5
votes
1answer
534 views

Differences between OAuth Web Server Flow, User-Agent Flow, Username-Password Flow?

The steps for Web Server flow, Username-Password Flow, and User-Agent Flow are different, so which occasions are these three used in and how do I select any particular method for different ...
2
votes
1answer
140 views

How to handle session invalidation for username / password OAuth flow?

Question What's the proper way to monitor for session timeout and automatically get a new session using node-salesforce? Background Building a basic node.js app on heroku. Using the OAuth2 ...
3
votes
1answer
288 views

Should OAuth2 with grant_type “password” work for “High Volume Customer Portal” users?

I am using the "/services/oauth2/token" end point with grant_type "password" (and with client_id, client_secret, username, password) from JavaScript code. With "IP Restrictions" set to "Relax IP ...
1
vote
1answer
84 views

Force.com Explorer with OAuth complient environments

As I can see (correct me if I am wrong), Force.com Explorer can't be used for Salesforce environments where forcing of OAuth 2.0 compliance is set to true ? Is there some newer version of this ...
7
votes
2answers
663 views

How do I get an OAuth2 refresh token in Google Chrome Packaged Apps?

Background I am creating a Google Chrome Packaged App that allows users to access various features from a plurality of salesforce.com organizations. This app will allow users to perform various tasks ...
4
votes
0answers
438 views

How to authenticate a JavaScript (e.g. AngularJS) client of an Apex @RestResource?

I am working on an AngularJS mobile application that obtains its data from salesforce.com using REST calls to @RestResource Apex classes. (There are no conventional Visualforce/Apex controller pages.) ...
4
votes
1answer
1k views

Using Java and Spring to integrate with Salesforce REST APIs

I want to send information from our webapp (using Java and Spring) to the Salesforce REST APIs. I'm looking for an up-to-date example of how to use Spring Security to authenticate with OAuth to the ...
6
votes
1answer
170 views

Multiple connected apps using OAuth

We have a Node.js application whose web page is exposed as a canvas app on Salesforce. This shows the web page on Salesforce and allows users to make visual changes to it (one of our requirements). ...
10
votes
2answers
805 views

security token vs session id vs access token

Are all of these three separate values that are only linked for the same user ? For security token I mean on value that you can take from Setup -> My Personal Information -> Reset security token. As ...
3
votes
0answers
250 views

Get access token from SOAP web method

I have following situation. There has been defined partner trust between Salesforce and our XY web application. These are under OAuth 2.0 compliance. We have defined XY package with client key, secret ...
7
votes
1answer
468 views

INVALID_SESSION_ID: This session is not valid for use with the API, when calling SOAP API in old fashion

I have registered connected application with partner's SalesForce on Partner API level. Connected app have defined following scopes (id, web, api and refresh_token). When I try to invoke SOAP API ...
2
votes
1answer
222 views

Invoking SOAP API in old fashion

I have registered in SF connected application, let say XY. This was done to accomplish SSO scenarios. If there is integration on Partner API level as described, is it possible then to call from XY ...
2
votes
2answers
213 views

saml bearer oauth question

This is related to a previous question I asked: See: salesforce saml bearer oauth flow Anyway i am still having problems understanding how to consistently get an access token from salesforce for a ...
6
votes
1answer
316 views

Get user's info on login into Salesforce org with OpenID Connect

As per the winter'14 feature OpenID Connect, I have successfully logged-in salesforce but I not getting enough user information like I was able to do in Facebook auth. While facebook auth provided a ...
5
votes
1answer
197 views

Custom Landing Page Once Logged in salesforce

I wish to create different custom landing pages for users based on their profile, after successful login through SalesForce. Is it possible to create? Provide your thoughts.
2
votes
0answers
90 views

Facebook SSO with Portal Users

I am using Facebook as Auth Provider to allow portal users to login into portal org via their facebook credentials. I have successfully implemented that. Now, in Registration Handler, while creating ...
1
vote
1answer
78 views

Storing oAuth Response in Org making request

I am looking to change a synchronous integration in my managed package with my third party web service to be asynchronous, so that a callout will post the information to my web service, and at some ...
4
votes
2answers
989 views

Apex REST API call from Javascript via Ajax Toolkit

I have created a GET method REST service and trying to Ajax call the service through sforce.connection.remoteFunction from JavaScript. Able to get the Session Id and it hitting the service. But the ...