OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
1answer
21 views

Getting remote access authorization error with Mobile SDK on iOS

When this happens during oauth on iPad, clicking the Not You link and reentering the username/pwd takes the user to a full screen web view of the Salesforce UI instead of my mobile app!!! Ugh! So I'm ...
1
vote
1answer
19 views

Revoke Refresh token not working

So I have a refresh token and it is showing under the user in the oAuth Connected Apps related list. I am sending this code to revoke but the oAuth Connected Apps still shows it in the list (yes I ...
2
votes
2answers
47 views

How to skip login and remote authorisation pages when authenticating using oauth webserver flow?

I want to access a rest webservice hosted in a salesforce org from another Salesforce org. I am using the web server flow for authentication. When hitting the authorisation URL, I am redirected to a ...
2
votes
1answer
42 views

Has anyone got the OAuth 2.0 JWT Bearer Token Flow to work initiated from Apex code now 'RSA-SHA256' signing is available?

This year old thread Connect apex and Google API using JWT to retrieve Oauth 2.0 token was started before the Crypto class included the 'RSA-SHA256' signing algorithm. Now that this algorithm is ...
1
vote
1answer
40 views

@future invocation of REST service on same org - how to get accessToken?

I have a business requirement to attach a pdf document (visualforce rendered as pdf) to Notes and Attachments on a record when that record gets updated. Since we can't use getContentAsPDF() in the ...
6
votes
1answer
114 views

“Session expired or invalid” problem calling an @RestResource from Apex in Winter '15 preview; UserInfo.getSession returns null for Force.com Sites

Based on threads such as Calling Apex Rest custom web service from Apex code we have HTTP calls in our Apex code (contained in a managed package) back to the same org authorized like this: ...
2
votes
1answer
94 views

Access REST API after Single Sign-on (SSO)

We have a heroku-hosted web app that used Salesforce as Identity Provider (IdP) to do Single Sign-On (SSO) between SFDC & other services. We know that in doing so our web app user are already ...
0
votes
0answers
33 views

Getting an INVALID_SESSION_ID: This session is not valid for use with the API error in managed package

I have a managed package which is calling the SOAP api using the current users session ID through the ajax toolkit. In certain orgs users are getting the following error when they load the app. ...
1
vote
0answers
12 views

Parameters set through the canvasApp in VF page not recieved in the connectedApp's client code

I am new to Canvas framework and stuck with some basic requirement I have created a connected app to integrate my application with salesforce through oauth flow. callback url destination is the ...
3
votes
1answer
33 views

OAuth2 Refresh Token Flow with Communities

I'm trying to satisfy a requirement for providing an API for communities users, where they can log into Salesforce, retrieve some data, and provide that back to a client. I have two questions around ...
2
votes
1answer
56 views

OAuth2 Refresh Token Flow - Unsupported Grant Type

I am attempting to obtain a token, using the Oauth 2 refresh token flow. I am using the REST Console in Chrome to perform the following POST operation: My URI is ...
1
vote
0answers
37 views

Finishing authentication after user is prompted to change password

My SF app is only the login page. All the access of the data is done using SF REST API. Our login page is a custom VF page. The problem is when the user first logs in, she receives the change password ...
1
vote
1answer
65 views

Is there anyway to check if an access token is valid or not?

I got an access token from Salesforce and now I want to check if it's valid or not. How can I do this? Updated question. I have a client application and a server. The client requests an access token ...
0
votes
0answers
28 views

Oauth WARN [HttpMethodDirector] Unable to respond to any of these challenges: {token=Token}

I'm just a beginner with Salesforce Oauth. When I try to get the access token with username/password flow everything seem good. This is out put: > Status-Code: 200 Auth response: { "id": ...
0
votes
1answer
41 views

Get SFDC sessionID via access token

As the title. I'm using username/password flow to request an access token. So how can I request a SFDC sessionID from that token?
1
vote
1answer
39 views

redirect uri mismatch in google oauth 2

i am trying to implement google oauth2 .i created a web application whem it redirect to OAuth login screen its giving me error : "redirect_uri_mismatch".here is screen shot but in google console my ...
6
votes
1answer
195 views

Fetch image from Rich Text Field

I have built an export/import tool for Knowledgebase articles using Partner API. Everything works fine, the only functionality I can't produce is the ability to export images, hence obviously I can't ...
2
votes
1answer
67 views

Unable to create a Connected App: “The application name has been used before” even when it has not

I managed to add a connected app in a sandbox instance but when I try to add one in the production instance, I receive this error. The application name [name] / [API name] has been used before. ...
1
vote
0answers
24 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
2
votes
0answers
24 views

Salesforce1 3rd party OAuth callback

I have a HTML/JavaScript app that runs (part of a VisualForce page) inside Salesforce1 that needs to also authenticate with another web server using OAuth. However, I have not found a way to set the ...
0
votes
1answer
39 views

Make Restful call with Parameters

This is essentially part 2 building from my earlier question. Call Restful SFDC service from Java I successfully got my service to authenticate. I also got my service to successfully call a post ...
2
votes
1answer
128 views

SalesForce OAuth Endpoints

I am working on an application, where any user can login into my application through Salesforce. As per mentioned in below url, We can use https://login.salesforce.com or for sandbox ...
3
votes
1answer
58 views

How to do oAuth within Visualforce and be redirected back to the visual force page

FINAL* Ok, so first lesson, do not stay up to late Second for those that may need: First URL needs to end in authorization This returns a CODE the second needs to be an HTTPRequest with response ...
2
votes
1answer
70 views

Call Restful SFDC service from Java

I'm still working on getting the authentication working but having issues. I have been getting a 401 unauthorized error. All of the items I have hidden I am sure are correct values UNLESSS I need to ...
1
vote
1answer
177 views

Creating a standalone java client of salesforce chatter using rest Api

EDIT I am struggling to add the correct formatting to the code post below. if someone can edit this question and apply the proper formatting to code, i would appreciate it. I am fairly new to ...
1
vote
1answer
233 views

400 Bad Request in Response

I have been using working on an Applicaion in angularjs, and While getting response of 2nd request for the token, I am getting following an error. Illegal Request You have sent us an Illegal URL or ...
2
votes
1answer
66 views

Authentication and Access Salesforce Account through Other Portals

I am developing an application in Angularjs and my requirements is to get login in my application through SalesForce, and access data of SalesForce. I have created developer account in Salesforce and ...
0
votes
0answers
12 views

SCIM protocol release date

As found in case SF API for SCIM, SCIM is currently in pilot phase. Is there known release date for protocol ? Are there plans to support SF as SCIM CSP or also ECS ?
1
vote
0answers
33 views

User-Agent OAuth Authentication doesn't provide expires_in data

I'm using the User-Agent OAuth Authentication work-flow, and when receiving the authentication code, Salesforce is not sending me the expires_in data. Here's what my Salesforce response looks like. A ...
5
votes
3answers
225 views

What's the difference between these authentication endpoints?

Based on the information in the Salesforce rest-API documentation, examples of valid restful endpoints for authentication are: For authorization: ...
2
votes
1answer
144 views

In what case should OAuth 2.0 Refresh Token Flow be used?

I am now using web server authentication flow along with refresh token flow in my system. Once a user granted a permission for the app to access, the app will request a permission, an access token and ...
4
votes
1answer
36 views

OAuth Mechanism,User and password flow

I am using user pasword login authentication mechanism.I am doing this between two salesforce org.I have done the initial setup and I will be using Rest Api's. I can see instance and access token in ...
8
votes
1answer
117 views

Salesforce to Salesforce Oauth Webserver flow? Is it possible?

Is it possible to integrate Salesforce to Salesforce using Oauth Webserver flow? I cannot use the standard S2S(Salesforce to Salesforce) feature due to certain limitation. I basically sync data from ...
7
votes
1answer
177 views

Prevent auto-authenticate using OAuth 2.0 Web Server Flow?

We're trying to override the auto-authenticate behavior when kicking off a web server flow in the REST API. Basically, we need to let a user authenticate and capture OAuth tokens to several Salesforce ...
1
vote
0answers
52 views

Multiple Connected apps for oauth

I have a web application that has a mobile component. Both of them have Salesforce oAuth and use different connected apps. Sometimes users authenticate only via the mobile app and their credentials ...
1
vote
1answer
157 views

Where do I find the client id and client secret of an existing connected app?

Where do I find the client id and client secret of an existing connected app? The documentation talks about this information being provided when creating a new app, but what if my app already exists? ...
1
vote
1answer
102 views

Salesforce Communities - Login With Salesforce

Scenario: I want users to log-in into community via. standard log-in options, + with Salesforce (if they have Salesforce Account) as shown below: Now, in case i choose both the options in Login ...
1
vote
1answer
72 views

How does one log out on the client browser without revoking a refresh token?

How does one log out on the client browser without revoking a refresh token? I want a refresh token to be always available (so never revoke it) since multiple users will have the same account. So ...
0
votes
1answer
110 views

How to call REST webservice without username and password in request -

I have created one restful class: @RestResource(urlMapping='/showAccounts/*') global class ExRestController { @HttpPost global static List<Account> getAccounts() ...
3
votes
2answers
107 views

Canvas Signed Request not sending refresh_token

I have a canvas a app that I distribute via a managed package on the AppExchange. The canvas app is configured to post a signed request to my heroku app. I have selected all the oauth scope options: ...
2
votes
1answer
101 views

Failed refresh of access tokens on some accounts

We have a large amount of users connected to our registered app (using the OAuth 2.0 authorization code grant type). Nearly all of them refresh regularly with no problems. However, with 6 of those ...
0
votes
1answer
22 views

Do you require to register as a partner to consume user data using OAuth?

I am building an app that takes user data from salesforce using OAuth. Is there a way to do it without registering as a partner?
0
votes
0answers
43 views

Salesforce oauth “integration user” security

I will need to make api calls to salesforce from my external java application for which I plan to use oauth. I was going through some posts which state that one could use "integration user" like Post ...
0
votes
0answers
28 views

Authentication callback happens too late

I'm developing an android hybrid local app with SmartSync/SmartStore using AngularJS. The only place I've found where I can initialize the Force object is in the callback supplied for ...
2
votes
1answer
377 views

OAuth2 token request using JSON fails - grant type not supported

I'm building a small application in Go that will access Salesforce using REST. I chose to use the full OAuth webflow. Documentation for the Web Server Authentication Flow I'm able to do the full ...
4
votes
0answers
113 views

Mule SFDC Connector without user interaction using sfdc:config-with-oauth

I am trying to access Salesforce through my Mule flows using "sfdc:config-with-oauth". Is there any way I can achieve this without redirecting the user to a Login page? I know there is a SSO login ...
2
votes
1answer
96 views

OAuth callback through HTTP (not SSL) is possible?

In short: I need to set a Connected App to later use OAuth Web server Flow. The callback URL should be HTTP. My web server does not have a SSL certificate and I not able to get one. But SF give me ...
1
vote
0answers
28 views

Consuming parameters received from apex:canvasApp in OAuth 2.0 authentication mode [duplicate]

I have created connected app that would like to be rendered over Canvas mode. In Canvas configuration I have selected OAuth 2.0 as an authentication mode. I have created action linked to following ...
8
votes
1answer
109 views

OAuth Connected App without Identity Provider Enabled

Working on a project where the client wants to be able to use OAuth to login to an external website backend. The documentation for setting up OAuth doesn't actually mention enabling the IDP so I'm ...
1
vote
0answers
65 views

Force.com OAuth Endpoint Configurable

I want to make my Force.com OAuth endpoint applicationContext configurable so it can change to http://test.salesforce.com when someone select to login to their sandbox environment. Below is the the ...