OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
1answer
23 views

Username-Password OAuth Authentication is working with the community users?

I need to configure Username-Password OAuth Authentication to get salesforce data with the REST API through a community users. Is is possible to do that?
1
vote
2answers
23 views

Regarding OAuth2 class

I am unable to find official guide containing the description (methods, properties etc) of this Salesforce inbuilt class (OAuth2). Can someone let me know ?
2
votes
1answer
31 views

Can my Connected App be forced to use the stored redirect_uri?

I would like to use the Amazon Alexa voice service to create a voice interface for Salesforce. But I've run into problems. I am reading here: ...
3
votes
0answers
18 views

Custom Domains in web authentication flow

I'm running into authentication issues with users who are attempting to sign into Salesforce on our product using a custom domain (Oauth user-agent flow). From the Salesforce web signin page, the ...
1
vote
2answers
55 views

Determining How/When to Add Consumer Key to OAuth Flow

I hoping to get some best practice related to using a consumer key with a native iOS app and Salesforce.com. The following is relevant to this scenario: A Managed Package (MP) has been created and ...
1
vote
1answer
27 views

oAuth2 auth from AngularJS for Chatter API with AngularJS

I have an AngularJS app in a VF page which will be interacting with the ChatterAPI. Obviously just making a request with Resource returns a 403 since I am not authenticated. The only info I can find ...
0
votes
1answer
29 views

Problem getting AUTH Token

I'm trying to get an Auth Token (using PHP) and having trouble getting back the authorization code so I can make the next call and get the Auth Token. I set up a connected APP in the console and have ...
2
votes
1answer
55 views

oauth consumer key and/or signature not included in request parameters or authorization header

I am calling a REST Api https://www.gliffy.com/products/online/api/apidocs/rest/#oauth which needs oAuthkey and Password. Here is my Class public with sharing class DetailButtonController { public ...
0
votes
0answers
55 views

invalid grant/Authentication Failure with curl

Trying to get my head around the salesforce REST API. I wanted to get a session id to use for subsequent requests. I followed the documentation and tried to use curl for this as seen below. In order ...
1
vote
1answer
85 views

Marketing Cloud oAuth and Refresh token issues (RefreshToken Expires after first use)

Ok.There are questions about this but no answers. I am finding with ExactTarget the refreshToken expires when it is used (Which then I see no reason to use it at all since we would be using clientId ...
0
votes
0answers
17 views

Misbehaving Rest API in production for inbound calls leveraging oauth2 — receiving 403

I have a client that is having problems accessing custom SF Rest API. Login is successful using oauth2 token (services/oauth2/token) with grant_type = password. Attempt to access custom REST API ...
3
votes
0answers
17 views

Any clue as to why I am not able to use heroku environment variables in my jsforce auth function?

So I'm part of a team working on developing an a web app for our client, who uses salesforce as their database. We are using node.js on heroku to act for the server side code. The front end is ...
0
votes
0answers
16 views

Link in Visual Force page to connected app site with OAuth 2

We have a visual force homepage which contains links the user clicks to be directed to varying information. The user must log in to our portal (SF) in order to visit this homepage. We would like to ...
0
votes
1answer
30 views

Salesforce Oauth on client side

I am trying to authenticate a client in my SPA via Salesforce Oauth all on the client side. Currently, I have been trying to implement the user agent flow and have been receiving many errors such as: ...
1
vote
1answer
21 views

Getting SFDC OAuth login_hint to work

I'm trying to get the login_hint to work when using OAuth, but it seems like SFDC is encoding it during the redirect to the login page in a way that it isn't recognized Here is my url scrubbed of any ...
1
vote
1answer
26 views

Using SOAP login() for authentication in Salesforce oAuth flow

I would like to do a background login of users (using soap login() API) and then use the session to trigger an oAuth flow to receive my access and refresh tokens. Is this feasible and if so how?
1
vote
1answer
33 views

getAccessToken is returning null when using Microsoft Access Control Source

I have set up OAuth with Sharepoint by following a Salesforce tutorial. When I go to the Test-Only Initialization URL, I am successfully directed through the OAuth process and end up at the Callback ...
3
votes
1answer
187 views

OAUth Issue: OAuth_Approval_Error_Generic

So I'm using the iOS Mobile SDK. I had an app working without issue, then changed the Consumer key to that of a different connected app (i.e. changed away from the default sample one) and updated the ...
0
votes
0answers
13 views

display popup is not working oauth

Does anyone know how open RemoteAccessAuthorizationPage.apexp in popup, when using OAuth2 (it does not work if i put in ...
0
votes
0answers
22 views

omniauth-salesforce returns invalid_credentials even though user successfully logged in

I am trying to allow users to use salesforce to authenticate. I am using the ruby gem omniauth-salesforce. The user clicks my login using Salesforce button, they are redirected to the salesforce ...
0
votes
0answers
19 views

SSO for community users using OAUTH / SAML

We have a SaaS that needs to be integrated with Salesforce community users. We are able to provide SSO for non portal users using SAML with SF as an identity provider . referred the following link ...
0
votes
0answers
34 views

Oauth2 in Chrome extension

I am trying to use the Oauth2 library to connect to salesforce from a 3rd party website. This is my salesforce.js file OAuth2.adapter('salesforce', { authorizationCodeURL: function(config) { ...
0
votes
0answers
14 views

Community user can not edit or update record from mobile app using SalesforceMobileSDK-iOS

Configuring My Org to have community and connected app - Created a community in my org. Created a connected app. Cloned "Customer Community User" profile and enabled "API Enabled" named this profile ...
0
votes
0answers
16 views

RegistrationHandler.updateUser method is not called when using the Existing User Linking URL

According to the RegistrationHandler interface document, the updateUser(userId, portalId, userData) will be called when if the user has logged in before with the authorization provider and then logs ...
0
votes
0answers
39 views

Guidance on Connecting to Google Drive API and any Existing Google Client APIs for Salesforce

I have a requirement to upload generated PDFs to a client's Google Drive. I have been exploring the HTTP/REST API surrounding the Server to Server OAuth 2.0 flow found here: ...
0
votes
1answer
29 views

Getting unsupported_grant_type while trying to get access token from Chrome Rest Client

When i try to get access token by calling the below url from Chrome Rest Client https://login.salesforce.com/services/oauth2/token by passing all headers grant_type: password username: ...
0
votes
2answers
93 views

Getting “Illegal URL or an improperly formatted request” while trying to get access token through REST call

I am trying to get access token from salesforce to access apex rest API. For this i am trying to get access token by sending request to https://login.salesforce.com/services/oauth2/token I am ...
0
votes
1answer
31 views

Callback URL for Username Password Flow

We are implementing Username-Password flow for silent authentication between Salesforce and our legacy system. While setting up the Connected App, Salesforce still asks me the Callback URL. However in ...
0
votes
0answers
25 views

Change Password not functional on iOS9 mobile app, oauth

When the oAuth screen requires the user to change their password, and takes them into the Change Password page, then the 8 character / 1 letter / 1 number status lights don't come on, and the change ...
2
votes
0answers
38 views

How to implement OAuth for community user self-registration with email verification

My Requirement: I am creating a iOS native application that is using Salesforce Mobile SDK 3.3.1 I am using OAuth2 for authantication. This application should allow community user to Login and ...
3
votes
1answer
36 views

Salesforce Communities as a 3rd party authentication server

I've gotten a requirement to build a login mechanism for my web and mobile apps that allows users who are members of a salesforce.com community site to leverage their SFDC logins to access my ...
1
vote
1answer
119 views

{“error”:“invalid_grant”,“error_description”:“inactive organization”}

I am making POST request to https://login.salesforce.com/services/oauth2/token to get the access token. Which is resulting in a 400 response code with the message - ...
2
votes
0answers
49 views

Problems authenticating using JSForce

so I've been trying to use JSForce to authenticate into SF. I used both the first example with SOAP API login and the second one with OAuth2: https://jsforce.github.io/document/#connection However, I ...
1
vote
0answers
55 views

Mutual Authentication / two way SSL & OAuth

Could you kindly help with following API authentication related questions: Would Mutual Authentication / two way SSL described in this link works in combination with OAuth authentication? Does ...
0
votes
1answer
25 views

Can we use OAuth to get notifications on behalf of customer salesforce accounts if they don't have workflow functionality?

We're building an application that integrates with Salesforce. As part of this, we expect users to give us OAuth permission to learn about events involving their Salesforce accounts. We'd rather use a ...
0
votes
0answers
22 views

Different Salesforce server between web login and API?

We recently had an issue with one of our clients that was causing our app's API calls to Salesforce to fail. Upon further investigation, it seems that the Salesforce server the client was assigned to ...
0
votes
1answer
33 views

Authenticate over OAuth 2.0 for SaaS application

I have multi-tenant SaaS application with single URL address. On application's login screen there is beside username and password fields one more - tenant name. I would like to add on login screen - ...
0
votes
0answers
17 views

Can AccessTokens acquired with username-password oauth flow be explicitly revoked?

I have implemented API sessions as decribed here: https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_username_password_flow.htm and would like to explicitly expire the ...
4
votes
1answer
112 views

Security concerns around site.login() StartURL parameter

I was reading An Insiders Guide to Security Review and on page 17, point 10 noticed something called Unvalidated Redirects and Forwards. The jist here is that user might be redirected to malicious ...
0
votes
1answer
31 views

Revoke refresh tokens by user id

In sites when user changes password, the authorized apps aren't revoked. How does one revoke refresh tokens without actually knowing the token value?
1
vote
0answers
27 views

Can we add SSO in managed package?

I have an app which is using SSO to integrate with salesforce. Salesforce is used as an identity provider. So my question is can I add SSO in managed packaged? Because we want to provide an managed ...
1
vote
1answer
84 views

OAuth Password Authentication for curl

I've seen this question on here numerous times, but none of the solutions I've found have helped. I'm trying to authenticate via curl. I set up a connected App, and retrieved the Client Id and ...
2
votes
1answer
61 views

JSForce - getting OAUTH2 refreshToken - variable app is not defined

I am clearly missing something called app here. I am following Authorization Request section from the documentation. It says your app is callbacked from Salesforce with authorization code in URL ...
1
vote
1answer
36 views

Is it possible to export contacts from users salesforce accounts using external application (php)

So I'm building an application which exports contacts from various CRMs and unifies that data to run marketing reports on their contacts. I was easily able to get HubSpot and InfusionSoft working ...
0
votes
0answers
42 views

3rd Party Integration/Connected App Deployment?

I am rather new to Salesforce, and seeking a bit of clarification. I work as a developer in my company, and a client wants us to update contacts on their Salesforce as we deal with them using the ...
0
votes
0answers
31 views

OAuth2 popup window closes, main browser page does not obey redirect

For some reason, when I use OAuth, the redirect happens in the OAuth popup window a flash of a second before it closes. Shouldn't the main browser window be redirecting, and not the OAuth popup? Is ...
2
votes
2answers
379 views

Obtain enterprise WSDL via curl

I am trying to obtain enterprise WSDL by accessing https://cs15.salesforce.com/soap/wsdl.jsp?type=* URL via curl. For this, I have obtained access token through OAUTH2 method via the following curl ...
1
vote
1answer
47 views

Restricting users to access rails app authenticated via Salesforce

We are having a rails app and the authentication is based on Salesforce OAuth. Salesforce OAuth is used as our app requires salesforce objects. When we create a connected app in salesforce and use it ...
2
votes
1answer
48 views

How do I store 3rd party OAuth2 tokens in Salesforce?

Is there a standard mechanism for storing external app oauth tokens in Salesforce (smth like connected app but in the opposite direction)? I need my SF users to authorize within a 3rd party app and ...
1
vote
1answer
286 views

API for Validating OAuth Access Token

Here is my usecase, I have two apps, one written in rails and other is written in R. App written on rails acts as landing page. From there we can go in to app written in R. We are using Salesforce ...