OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

1
vote
0answers
31 views

Best way to parse “stringified” (sub-)Map<String,String>

In my Auth Provider RegistrationHandler, I received an instance of the Auth.UserData class, filled with users data (in this case it is an external Salesforce user). The usage is very comfortable, as ...
2
votes
2answers
21 views

Connected App OAuth scopes settings have no effect

I have a Connected App in Org A, which is used to let their users log into Community B in Org B. The registration handler works fine, but only the OAuth scopes inside the Connected App are not ...
2
votes
2answers
26 views

Accessing salesforce REST-API through greasemonkey script

Is it possible to query salesforce through its REST-API using a greasemonkey/tampermonkey script only ? If yes, can someone give me a hint on howw to achieve that. I have been going through ...
1
vote
0answers
17 views

Correct redirect_uri for Google Sheet (not web app)?

We have several Google Sheets that interact with Salesforce, all now broken with ouath1 deprecation. I've found lots of examples of oauth2 for web apps, but I can't make it work with a Google sheet. I ...
3
votes
0answers
16 views

Adding a callback URL to an existing connected app

I have a connected app I created a long time ago. I would like to add an additional callback url to the app. Before I do that, I need to be 200% sure that existing users that are already connected to ...
3
votes
1answer
49 views

OAuth web server flow - login redirect loop?

We have an OAuth Web Server Flow setup in our SF managed package that is used to authenticate our web service with Salesforce for API access. When a user first opens our app in SF, a call is first ...
0
votes
0answers
13 views

JsForce(nodejs) for the Oauth, its not returning RefreshToken

Using JSForce(nodejs), I create a new connection were it will returns accesstoken,Instance_URL and refreshToken and Userdetails. The thing is it returns accesstoken, Instance_URL and Userdetails but ...
1
vote
0answers
8 views

How do I contextualize the Fuel SDK to retrieve event data for a specific user?

Is it possible to get the Ruby FuelSDK to query for, say, the subscribers or events of another user who has installed an app? Do I simply need to set the internal_token? fuelsdk_client = ...
1
vote
2answers
30 views

Does the legacy token aka internal oauth token ever expire?

https://code.exacttarget.com/app-development/marketing-cloud-apps/single-sign-on.html describes the request->user->internalOauthToken as: An OAuth2 token that can access Email SOAP API. It ...
3
votes
2answers
28 views

OAuth Access Token Expiration

I have read many places that the access token session length is controlled by the client application and will expire "from time to time", but I cannot find a way for my application to calculate the ...
1
vote
0answers
13 views

Is it required to change OAuth endpoints based on custom domain?

We have done integration between .net application and Salesforce. Currently we are using the primary OAuth endpoints from .net application for authentication: For production: For authorization: ...
3
votes
0answers
56 views

Invalid Assertion error in OAuth 2.0 SAML Bearer Assertion Flow

I am trying to generate an OAuth token with the SAML 2.0 Bearer Assertion flow in Salesforce.com, but receiving invalid assertion error: { "error_description": "invalid assertion", "error": ...
0
votes
0answers
29 views

Restforce using wrong OAuth base URL during reauthentication?

I'm using Restforce to authorize via OAuth2 in a Rails app. After the oauth_token expires, when creating a new Restforce client, during the attempt to re-authorize via Restforce's authenticate!, it ...
1
vote
1answer
65 views

how to access a connected app from another org

I have created one connected app with API (Enable OAuth Settings) and it has generated consumer key and consumer secret. how to use this information to access the connected app from a different org? ...
3
votes
2answers
116 views

Possible Username-Password OAuth Authentication Flow security issues?

We have chosen to use "Username-Password OAuth Authentication Flow" over the "Web Server OAuth Authentication Flow" and "User-Agent OAuth Authentication Flow" because we need to login silently, ...
1
vote
0answers
67 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
2
votes
2answers
38 views

Total Newbie. Cannot log into my first test app using grant_type=password

I have set up a test application on my developer instance of Salesforce. I have a client_id, client_secret and I have the necessary security token appended to my password. I am trying to authenticate ...
0
votes
0answers
22 views

Multiple machines long term REST API access using the same Salesforce community user account

I would like to have a program such that it will ask for Salesforce community users to login via OAuth2.0 web server flow once to obtain refresh & access token, so that I can access Salesforce ...
0
votes
1answer
64 views

Need help with getting auth token from Postman

I need some help with getting Auth Token through Postman. Based on https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_username_password_flow.htm&language=en_US I have constructed a ...
-1
votes
2answers
51 views

Username authentication oauth flow android

I am new salesforce and have good knowledge of java and android development.. Since the Default authection of salesforce template app uses web view I want to do it without using web view through some ...
3
votes
1answer
48 views

Offline authentication

We are developing a windows-based application that can work either offline or online. When online, we want to use Salesforce to authenticate our users (Portal Users) and consume some REST services ...
4
votes
1answer
59 views

Logging in the SalesForce with a PhoneGap APP with a Authenticated Website User

I developed a PhoneGap Connected APP that displays SalesForce logged user account details. Accessing as Administrator can access the information I need. accessing as a regular user (Authenticated ...
17
votes
2answers
881 views

What causes a Connected App's Refresh Token to expire?

We have configured our web application to use OAuth2 with our SFDC Connected App. The connected app is configured to never expire the refresh token unless manually revoked. When an admin connects the ...
1
vote
0answers
47 views

Community with external auth provider

We are trying to configure a community site with external auth provider. We have a c# service that connects between an SSO service we have that is working with open id protocol and salesforce. This ...
0
votes
0answers
43 views

Why isn't my redirect uri working with facebook toolkit?

I am attempting to integrate Salesforce with Facebook using the Facebook Toolkit and am running into an Authorization Required error. After much research, I'm stumped! I am getting this error: { ...
1
vote
1answer
41 views

If I connect through multiple users to Salesforce Bulk API, what counts toward API limit?

As stated by the title, I'm not sure if, having a connected app, the API limit is reached based on my license or users (they come from different customers, so each user has his own license with his ...
3
votes
1answer
251 views

How to connect to Salesforce REST API without OAuth? How does Jitterbit do it?

So what I read everywhere is that, in order to connect to Salesforce via the API, you'll have to authenticate using OAuth. But this involves creating a Connected App, which is 'cumbersome' for normal ...
0
votes
1answer
444 views

How to choose between oauth and saml [closed]

I need to push data from external system to salesforce. External system has got lot of communities with it. Each community should be linked with a salesforce org. We do have apex classes to pull data ...
1
vote
1answer
225 views

Error when validating External Data Source for SharePoint Online

I get the following error when trying to validate and sync my newly created External data source for SharePoint Online in Salesforce: "Status An unknown error occurred while accessing Files ...
3
votes
1answer
59 views

Misbehaving REST API on test.salesforce.com

We have several applications requesting and updating data in Salesforce through the rest api, this is all working fine on login.salesforce.com. we now are continueing development to ...
3
votes
1answer
27 views

How to generalize Integration components in Managed Packages

I am creating a managed package with a connected App to integrate with an external system( oAuth configured). The external system uses my developer organization's Consumer key and secret right now to ...
0
votes
1answer
95 views

How to change username jwt OAuth JWT?

I have couple of questions in jwt OAUTH flow. I am trying to use OAuth JWT Token Bearer Flow to connect to the Salesforce REST API from C#. I have configured a Connected App within Salesforce and ...
1
vote
1answer
149 views

How to set custom frame to iOS Salesforce Login Screen(UIWebView)?

I'm showing Salesforce login screen in my iOS native application, but their login screen (WebView) is covering my entire custom screen and I'm not able to show the status bar and navigation bar at top ...
1
vote
2answers
128 views

How to get claims of logged in user in Salesforce iOS SDK [duplicate]

I have integrated "SalesforceMobileSDK-iOS-Distribution" library in my iOS native application from this link to achieve scenario as mentioned below ...
2
votes
1answer
64 views

OAuth Username-Password Flow - Inconsistent login failure

Noticing this behavior in my Full Sandbox after refreshing it. Whenever a third party application is trying to loggin using OAuth Username-password flow it gets the below error 3 out of 5 times. But ...
0
votes
0answers
92 views

Can an API user be set inactive automatically? API returned “cannot reparent record” for active user

I have a web application that uses the Salesforce API to create Contact, Account, Opportunity records. We set up an administrator user with full permissions to use as the Oauth login user, and I use ...
2
votes
0answers
81 views

Salesforce OAuth Refersh Token - Invalid Scope

I'm trying to get Referesh Token as part of scope but I'm getting following error error=invalid_scope&error_description=the%20requested%20scope%20is%20not%20available This is my request ...
1
vote
1answer
63 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
0answers
104 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
2
votes
2answers
56 views

What's the flow for refreshing access token with a refresh token?

So, suppose I managed to get refresh_token, what happens now: Should I perform a new access token request every time I connect (so I send the refresh token before connecting, every time) Try if the ...
1
vote
2answers
43 views

Validate portal users using OAuth 2.0

How can i validate portal users using OAuth 2.0? My current implementation is to send request to login.salesforce.com as : ...
2
votes
1answer
87 views

How to create a managed application and namespace for REST API

I am following up the post here: REST API without Connected App Although the answer was very helpful, I'm new to SF and need some clarity on some things: 1. How and why can a separate (free ...
2
votes
1answer
177 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
2
votes
3answers
119 views

OAuth JWT returns the same session ID on multiple requests

I am trying to connect to Salesforce from an external server and I am doing this via the OAuth 2.0 JWT flow to gain authorization into Salesforce. I construct the JWT token from the external server ...
1
vote
1answer
207 views

Viewing sharepoint documnets in Salesforce using Files Connect

I want to view my Sharepoint documnets in salesforce using "File Connect" introduced in Winter15 release for connecting to External Data source but i am facing a problem to connect to sharepoint. I ...
3
votes
1answer
78 views

SiteAuth UserAgent Test Class Creation

I'm new in creating SiteAuth userAgent test class creation. public SiteAuthControl() { if(!Test.isRunningTest()) { string userAgent = ...
0
votes
0answers
174 views

Best API to use Send/Receive Salesforce Data

I'm working on getting a Salesforce API key currently so that I can develop a web-based application (probably php) to streamline a currently tedious process. My current workflow is as follows: Open ...
2
votes
1answer
322 views

Why isn't curl getting the session id?

curl -v https://test.salesforce.com/services/oauth2/token -d "grant_type=password" -d "client_id=" -d "client_secret=" -d "username=" -d "password=" I've tried this with instance name instead of test ...
1
vote
0answers
36 views

Accessing Salesforce session via oAuth maintains session across browsers

I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce ...
1
vote
1answer
95 views

How best to secure client_id + secret using - Rails + Restforce

I've successfully managed to set up an app using my developer account - it is currently making use of Ruby on Rails 4.2.beta2, ejholmes most excellent gem restforce and the very helpful tutorial and ...