OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

1
vote
1answer
23 views

how to access a connected app from another org

I have created one connected app with API (Enable OAuth Settings) and it has generated consumer key and consumer secret. how to use this information to access the connected app from a different org? ...
3
votes
2answers
45 views

Possible Username-Password OAuth Authentication Flow security issues?

We have chosen to use "Username-Password OAuth Authentication Flow" over the "Web Server OAuth Authentication Flow" and "User-Agent OAuth Authentication Flow" because we need to login silently, ...
1
vote
0answers
37 views

Salesforce IDP, OAuth 2.0 JWT Bearer Token Flow

I'm trying to use Salesforce as an IDP for Aha! Ideas Portal. I had the SAML working fine, but now I need to setup JWT. I'm currently following these tutorials: Using JSON Web Token (JWT) for Aha! ...
2
votes
2answers
20 views

Total Newbie. Cannot log into my first test app using grant_type=password

I have set up a test application on my developer instance of Salesforce. I have a client_id, client_secret and I have the necessary security token appended to my password. I am trying to authenticate ...
0
votes
0answers
13 views

Multiple machines long term REST API access using the same Salesforce community user account

I would like to have a program such that it will ask for Salesforce community users to login via OAuth2.0 web server flow once to obtain refresh & access token, so that I can access Salesforce ...
0
votes
1answer
35 views

Need help with getting auth token from Postman

I need some help with getting Auth Token through Postman. Based on https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_username_password_flow.htm&language=en_US I have constructed a ...
-1
votes
2answers
29 views

Username authentication oauth flow android

I am new salesforce and have good knowledge of java and android development.. Since the Default authection of salesforce template app uses web view I want to do it without using web view through some ...
2
votes
1answer
26 views

Offline authentication

We are developing a windows-based application that can work either offline or online. When online, we want to use Salesforce to authenticate our users (Portal Users) and consume some REST services ...
3
votes
1answer
47 views

Logging in the SalesForce with a PhoneGap APP with a Authenticated Website User

I developed a PhoneGap Connected APP that displays SalesForce logged user account details. Accessing as Administrator can access the information I need. accessing as a regular user (Authenticated ...
16
votes
2answers
392 views

What causes a Connected App's Refresh Token to expire?

We have configured our web application to use OAuth2 with our SFDC Connected App. The connected app is configured to never expire the refresh token unless manually revoked. When an admin connects the ...
1
vote
0answers
32 views

Community with external auth provider

We are trying to configure a community site with external auth provider. We have a c# service that connects between an SSO service we have that is working with open id protocol and salesforce. This ...
0
votes
0answers
35 views

Why isn't my redirect uri working with facebook toolkit?

I am attempting to integrate Salesforce with Facebook using the Facebook Toolkit and am running into an Authorization Required error. After much research, I'm stumped! I am getting this error: { ...
1
vote
1answer
35 views

If I connect through multiple users to Salesforce Bulk API, what counts toward API limit?

As stated by the title, I'm not sure if, having a connected app, the API limit is reached based on my license or users (they come from different customers, so each user has his own license with his ...
2
votes
1answer
120 views

How to connect to Salesforce REST API without OAuth? How does Jitterbit do it?

So what I read everywhere is that, in order to connect to Salesforce via the API, you'll have to authenticate using OAuth. But this involves creating a Connected App, which is 'cumbersome' for normal ...
0
votes
1answer
89 views

How to choose between oauth and saml [closed]

I need to push data from external system to salesforce. External system has got lot of communities with it. Each community should be linked with a salesforce org. We do have apex classes to pull data ...
1
vote
1answer
133 views

Error when validating External Data Source for SharePoint Online

I get the following error when trying to validate and sync my newly created External data source for SharePoint Online in Salesforce: "Status An unknown error occurred while accessing Files ...
3
votes
1answer
53 views

Misbehaving REST API on test.salesforce.com

We have several applications requesting and updating data in Salesforce through the rest api, this is all working fine on login.salesforce.com. we now are continueing development to ...
3
votes
1answer
22 views

How to generalize Integration components in Managed Packages

I am creating a managed package with a connected App to integrate with an external system( oAuth configured). The external system uses my developer organization's Consumer key and secret right now to ...
0
votes
1answer
65 views

How to change username jwt OAuth JWT?

I have couple of questions in jwt OAUTH flow. I am trying to use OAuth JWT Token Bearer Flow to connect to the Salesforce REST API from C#. I have configured a Connected App within Salesforce and ...
0
votes
1answer
91 views

How to set custom frame to iOS Salesforce Login Screen(UIWebView)?

I'm showing Salesforce login screen in my iOS native application, but their login screen (WebView) is covering my entire custom screen and I'm not able to show the status bar and navigation bar at top ...
1
vote
2answers
78 views

How to get claims of logged in user in Salesforce iOS SDK [duplicate]

I have integrated "SalesforceMobileSDK-iOS-Distribution" library in my iOS native application from this link to achieve scenario as mentioned below ...
2
votes
1answer
59 views

OAuth Username-Password Flow - Inconsistent login failure

Noticing this behavior in my Full Sandbox after refreshing it. Whenever a third party application is trying to loggin using OAuth Username-password flow it gets the below error 3 out of 5 times. But ...
0
votes
0answers
66 views

Can an API user be set inactive automatically? API returned “cannot reparent record” for active user

I have a web application that uses the Salesforce API to create Contact, Account, Opportunity records. We set up an administrator user with full permissions to use as the Oauth login user, and I use ...
1
vote
0answers
53 views

Salesforce OAuth Refersh Token - Invalid Scope

I'm trying to get Referesh Token as part of scope but I'm getting following error error=invalid_scope&error_description=the%20requested%20scope%20is%20not%20available This is my request ...
1
vote
1answer
51 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
0answers
71 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
2
votes
2answers
44 views

What's the flow for refreshing access token with a refresh token?

So, suppose I managed to get refresh_token, what happens now: Should I perform a new access token request every time I connect (so I send the refresh token before connecting, every time) Try if the ...
1
vote
2answers
34 views

Validate portal users using OAuth 2.0

How can i validate portal users using OAuth 2.0? My current implementation is to send request to login.salesforce.com as : ...
2
votes
1answer
76 views

How to create a managed application and namespace for REST API

I am following up the post here: REST API without Connected App Although the answer was very helpful, I'm new to SF and need some clarity on some things: 1. How and why can a separate (free ...
2
votes
1answer
113 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
2
votes
3answers
88 views

OAuth JWT returns the same session ID on multiple requests

I am trying to connect to Salesforce from an external server and I am doing this via the OAuth 2.0 JWT flow to gain authorization into Salesforce. I construct the JWT token from the external server ...
1
vote
1answer
171 views

Viewing sharepoint documnets in Salesforce using Files Connect

I want to view my Sharepoint documnets in salesforce using "File Connect" introduced in Winter15 release for connecting to External Data source but i am facing a problem to connect to sharepoint. I ...
3
votes
1answer
55 views

SiteAuth UserAgent Test Class Creation

I'm new in creating SiteAuth userAgent test class creation. public SiteAuthControl() { if(!Test.isRunningTest()) { string userAgent = ...
0
votes
0answers
138 views

Best API to use Send/Receive Salesforce Data

I'm working on getting a Salesforce API key currently so that I can develop a web-based application (probably php) to streamline a currently tedious process. My current workflow is as follows: Open ...
2
votes
1answer
243 views

Why isn't curl getting the session id?

curl -v https://test.salesforce.com/services/oauth2/token -d "grant_type=password" -d "client_id=" -d "client_secret=" -d "username=" -d "password=" I've tried this with instance name instead of test ...
1
vote
0answers
34 views

Accessing Salesforce session via oAuth maintains session across browsers

I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce ...
1
vote
1answer
68 views

How best to secure client_id + secret using - Rails + Restforce

I've successfully managed to set up an app using my developer account - it is currently making use of Ruby on Rails 4.2.beta2, ejholmes most excellent gem restforce and the very helpful tutorial and ...
2
votes
1answer
103 views

Safest way to see if a user is still “logged in” (REST API)

I'm using the Salesforce REST API along with OAuth 2.0 User-Agent Flow. I have the need to "ping" Salesforce to see if a user is logged on (this is the simplest way to do so in my application). If the ...
2
votes
1answer
173 views

Static authorization token for REST API from external system

I am integrating an external system and they gave me an authorization token. I set the authorization token and it is working fine. I used SetHeader in HttpRequest. Now they want to send a REST ...
2
votes
0answers
25 views

Using the REST API, how can I tell that a user has blocked OAuth access vs revoked OAuth access?

It seems that I get the same authentication error message the token is invalid. Is there a way I can tell the difference as the vendor? Note that I am not referring to an Apex app. My app is purely ...
1
vote
1answer
37 views

What happens to Salesforce OAuth tokens when a user blocks your app or revokes access

I have a non-Apex app that relies on OAuth only. I'm trying to test out what happens if the user revokes access or blocks the app and/or then unblocks the app. In my limited testing, it seems that I ...
2
votes
1answer
163 views

Java Code to check validity (expiration) of access token using rest api

I am using username/password flow . I am getting access token . But when will that access token expires, so that I can request for new access token. i don't want to get access token with each request ...
3
votes
1answer
103 views

API calls and user context

Overview: Mobile device (call service on ESB) —> ESB (calls salesforce API to get data) —> Salesforce.Mobile devices and Salesforce supported by the same IdM system. Description: A custom API ...
3
votes
1answer
211 views

Instance Url related error when connecting to SOAP API using Access Token in Python

I am using salesforce-python-toolkit to connect to Salesforce SOAP API. I know how to connect to it using [user, password and security token]. But recently I have learned that I can connect to soap ...
2
votes
1answer
283 views

OAuth JWT Token Bearer Flow returns Invalid Client Credentials

I am trying to use OAuth JWT Token Bearer Flow to connect to the Salesforce REST API from C#. I have configured a Connected App within Salesforce and uploaded the certificate used to sign the token ...
1
vote
2answers
79 views

“App must be invoked via a signed request” shows in Canvas Previewer

I have connected App and added external link of Heroku to show as Canvas App. I have set the location Chatter Tab. In the developer account, my external application is accessible. It has set "Admin ...
0
votes
0answers
93 views

SFCrypto “keychain data missing or corrupted”

Intermittently getting the following error when logging in to iOS iPad app using Salesforce Mobile SDK. 2014-10-01 16:35:32:177 iPath[3381:60b] ERROR|SFCrypto|App id keychain data missing or ...
0
votes
0answers
26 views

How to test OpenID connect in sandbox?

I want to enable openid connect in Salesforce (google as the provider) Before doing that, I want to test it Can I test it in Sandbox?
1
vote
1answer
447 views

Getting remote access authorization error with Mobile SDK on iOS

When this happens during oauth on iPad, clicking the Not You link and reentering the username/pwd takes the user to a full screen web view of the Salesforce UI instead of my mobile app!!! Ugh! So I'm ...
1
vote
1answer
145 views

Revoke Refresh token not working

So I have a refresh token and it is showing under the user in the oAuth Connected Apps related list. I am sending this code to revoke but the oAuth Connected Apps still shows it in the list (yes I ...