OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
1answer
12 views

External App OAuth failure connecting to salesforce

I have an external app trying to connect to our salesforce using user credentials to create leads and contacts but Salesforce is rejection the connections. When I check the login history on user ...
4
votes
1answer
33 views

REST API server-to-server communication

I'm writing an application that needs to connect and grab some data from Salesforce. Data will be pulled by a background script (no UI) and then populated in a web UI. I can't find anything ...
1
vote
1answer
27 views

How do certain apps Authorize without connected apps? Heroku connect, Force CLI etc

I am pretty new to OAuth for public products, i am confused on how Public products do an OAuth to salesforce which do not have a connected App. I understand for any successful authorization we need to ...
1
vote
2answers
39 views

OAuth Authorization access, how to get Authorisation page on REST client tools like Postman?I am seeing HTML content

I am using Postman client for testing salesforce REST Services, but i am confused on how to get the Authorization page in the client. I am using the User agent flow and passing in the values and i am ...
3
votes
1answer
57 views

Authentication Failure when submitting Authorization Code in OAuth Web-Server Flow

I am trying to test the Webserver OAuth as described here I can get the authorization code successfully by opening https://login.salesforce.com/services/oauth2/authorize?response_type=code&...
1
vote
1answer
122 views

Best way to get Session ID or oAuth Access Token

What is the best way to get Session ID or oAuth Access Token, without having to use password in Apex Code (or) in custom settings (or) Named Credentials? Will one of the oAuth flows work in this case?...
1
vote
1answer
39 views

OAuth2 JWT Bearer token flow - “error”: “invalid_client”, “error_description”: “invalid client credentials”

i'm trying to get an access token, in order to make a REST call. I've followed this guide https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm&language=en_US Right now, i'...
0
votes
0answers
13 views

Does Salesforce communities support OAuth 2.0 SAML bearer assertion flow

I need to know if SF Communities supports OAuth 2.0 SAML bearer assertion flow. Based on what I read here communities doesn't support SAML Assertion flow that is different from the SAML Bearer ...
1
vote
1answer
37 views

Salesforce callback url for Heroku review apps

We have a application that uses Salesforce OAuth for user login. Our application is hosted on Heroku and we are using Heroku pipelines to deploy review apps. For every review app in Heroku a new ...
1
vote
1answer
63 views

Integrate third party app with Salesforce ensuring a seamless experience

I wrapping up a proposal for a client and I'm facing some integration architectural issues. I really need your help! The client has a self-care website and three mobile apps (android, Windows Mobile, ...
0
votes
0answers
14 views

Logging Into Pardot From Apex Using OAuth “Log In With Salesforce”

I'd like to write Apex code that pushes data into Pardot via Pardot's HTTP API. When the code spins up, I have to trade Pardot a username, password, and user-key for a session key (known as an "API ...
1
vote
0answers
18 views

Reusing OAuth from one canvas app in another

I have a few canvas apps that show pages from the same external system in Salesforce. I was wondering if there's anyway we can use OAuth from a single canvas app in all the other places, otherwise, I'...
1
vote
0answers
15 views

Connected app Consumer Key and Consumer Secret are not working after sandbox refresh :(

I got problem with salesforce connected app Consumer Key and Consumer Secret in Full sandbox after every refresh. When I create a new connected app and use it's key and secret, it is working. What ...
3
votes
1answer
43 views

Does Salesforce support OAuth 1.0

Does anyone know if Salesforce supports OAuth 1.0 ? Our current solution is based on OAuth 1.0 and in the last week we started getting some issue creating such connection. Any feedback will help, ...
0
votes
1answer
56 views

unable to generate access token for OAUTH 2.0

I am trying to generate the access token using OAUTH 2.0 . Here is the full code but repsonse.getBody() is not giving me the JSON string. I have 2 instances of salesforce sandbox api, data flow is ...
6
votes
1answer
68 views

Server to Server JWT Authentication Certificate management

I'm writing an application to sync some data from a service to salesforce and back. I'm working with a developer account and so far I was able to implement the bulk of the needed functionality merely ...
0
votes
0answers
33 views

OAuth1 stopped working

Our SalesForce app is connected to GAE via OAuth1, each time we provision new account we make this connection. Lately we start getting this errors when trying to establish the connection: An ...
0
votes
0answers
31 views

Connected App Name not Visible in oAuth Usage Screen

I have one connected app which I am using to authenticate the users from my mobile application. I am using the login API rather than Salesforce Mobile SDK. I have found that with Mobile SDK Salesforce ...
0
votes
1answer
22 views

Does an iOS app accessing SF through Mobile SDK need to be listed as a “Connected App”

It seems that my app is still functioning OK in production even though it is no longer listed under Manage Apps/Connected Apps. Should it be listed there? The problem I'm having is that my iOS app ...
0
votes
0answers
29 views

Avaya Communicator web is not working

We use Avaya communicator web to run our call center. When I open Avaya web extension (Google chrome) and click on login through Salesforce credential and login. I got an error message: “License ...
1
vote
0answers
41 views

OAUTH 2.0 JWT How can I access request from client side to send JWT token to client application.

I am very new to the Oauth spec. I have done a lot of research but could not find the answer to what I should do. My task is currently my client application is using Salesforce as OAuth provider. So I ...
8
votes
1answer
67 views

OAuth interactions: do they count as API calls?

OAuth token grants and token authorizations are human interactions that take place in the browser. And token refreshes happen to be machine interactions. Do any of the typical OAuth interactions count ...
0
votes
0answers
23 views

Salesforce forget password issue while using oAuth

I have an heroku app which is using Salesforce oAuth for authorization. We are using Database.com Light user license. The app is working fine for authorization functionality. But while trying to ...
1
vote
0answers
65 views

Google as OAuth2 Provider to Log In from Mobile Device

I'm trying to login to Salesforce in a Xamarin app through Google in order to get a valid bearer token to interact with my custom Salesforce REST API. It works just fine if I point Xamarin.Auth to ...
0
votes
1answer
78 views

About createUser method from Auth.SamlJitHandler

for the implementation of Auth.SamlJitHandler I created a person account A and a User account U which are connected using U.RoleId = A.PersonContactId. I can not avoid this step. This makes the ...
3
votes
0answers
44 views

Google OAuth Auth. Provider doesn't ask for offline access

I set up an Auth. Provider for Google Apps as explained in the Salesforce Help, but Salesforce doesn't seem to ask for offline access so I have to go through the "connect" flow every hour, when I want ...
0
votes
0answers
9 views

Auto Resize Canvas app after OAuth login

I am using OAuth (vs. SignedRequest) authentication for my Canvas App (an external web app). I am displaying my Canvas app in Visualforce Page. I need help for 2 things. How to get user details like ...
1
vote
1answer
29 views

Rest API returns No_Access error to System Admin for userinfo call

We have used oAuth in our manage package. This package have oAuth flow and it works fine for all client except one. When we call /services/oauth2/userinfo it returns 404 (not found) — No_Access ...
0
votes
0answers
26 views

How to get oauth2 access and refresh tokens in JSON format

Problem I am trying to connect to an external api using oAuth2, and at the moment have the following code I am running from the Execute Anonymous Window. I keep getting a 401 error and I think the ...
1
vote
1answer
53 views

Implementing the self-authorization flow of signed request authentication for a canvas app

I'm working on a canvas app which will allow an existing web app to be viewed through canvas. I have the app working with Signed Request authentication, which works fine when permitted users is set ...
0
votes
0answers
12 views

Handling INVALID_SESSION_ID from the developer end. [duplicate]

In our mobile app, customer is trying to add Lead and Contact to Salesforce and he is getting the below error [{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}] And we are ...
1
vote
1answer
59 views

Salesforce OAuth 2.0 JWT Bearer Token Flow with PHP

Anyone can help me with JWT Token Flow returning an error of {"error":"invalid_client","error_description":"invalid client credentials"} Why am I getting this error ? I suspect that I uploaded a ...
0
votes
1answer
7 views

Visualforce page accessible for other Salesforce profiles integrated with my software

I have my software that is sending data to Salesforce using REST API. This is for now only happening for my Salesforce Profile. I want other Salesforce profiles to be able to integrate with my ...
1
vote
1answer
100 views

Salesforce SAML Assertion - Failed: Missing Consumer Key Parameter

We are developing native mobile app where we are using oAuth token for Salesforce API access. We want to have SSO integrated with some SSO provider like Okta which generates SAML response,where we are ...
0
votes
0answers
40 views

OAuth Named Credential Callout Failure

I have created a named credential that points to the Microsoft graph API. My credential has been authenticated successfully but when I try to use it from Apex it fails. I am unable to debug , The ...
0
votes
0answers
26 views

Salesforce Authorization Error while testing the Test-Only Initialization URL for “Microsoft Translator - Text Translation” API

I am trying to create the Salesforce Auth Service Provider of type Microsoft Access Control Service so that I can do the REST API call to "Microsoft Translator - Text Translation" API. I have done ...
0
votes
0answers
32 views

SoapUI - Community User Login Setup

I want to setup some tests using the SoapUI Tool. The first part of my test involves getting a token for a community user. Since the OAuth flow mechanisms are different for a community user, how can ...
0
votes
1answer
71 views

OAuth worked initially, but failed with 401 on the next day & subsequent

I'm working from https://developer.salesforce.com/page/Integrating_Java_Spring_Apps_on_Heroku_with_Force.com_REST_APIs On the first day, I got everything to work with localhost, so if I opened http://...
-1
votes
1answer
51 views

When to use username & password flow to obtain a token

One of ways to get an access_token to use with SFDC Rest Api is to use the Username and password flow, where you use both of these to get an access_token. Its documented here: https://developer....
0
votes
0answers
18 views

SAML assertion via an oAuth2 handshake

I am trying to implement third party app. The concern I am facing is that can we get SAML assertion via an oAuth2 handshake
1
vote
1answer
69 views

Connecting to Salesforce using AngularJS

newb here. I am trying to log in to a Salesforce account using AngularJS ForceNG and pull the data out of an object so I can post it on an Ionic page. I want to hard code the login and password, ...
0
votes
0answers
9 views

Salesforce server change - tied to refresh token?

We use Salesforce refresh tokens to access the Salesforce API on behalf of our users. To determine the API endpoint URL to access, we'll examine the response received when generating an access token. ...
2
votes
1answer
26 views

Enable Google Login for Communities

in my developer org i have set up a community. I also have set up google as auth provider. The auth process is working great for sales cloud users. Speaking of community users there is the problem, ...
1
vote
1answer
137 views

(400) Bad Request when attempting to use refresh tokens

Our application interacts with our clients' Salesforce instances using the REST API and refresh tokens we have stored on our database. Every API request will use that refresh token to get an access ...
4
votes
0answers
76 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
2
votes
2answers
35 views

Finding the Salesforce API URL after OAuth

I have completed OAuth for a Salesforce customer, and I have their access_token and refresh_token. But how do I know what API URL to call on their behalf? I.e. https://na16.salesforce.com/services/...
3
votes
2answers
138 views

session id or oath token, they not interchangeable?

Very new to Salesforce development. I used a connect app to get Oauth security token in a plugin. I am trying to call an Adobe Salesforce web service that needs a session ID. When I run my plugin I ...
3
votes
1answer
55 views

Authorization for APEX Webservice

We're writing an internal Apex REST webservice to accept POST requests from an external system to call. The kink here is that we cannot control the process in which the external system calls our ...
0
votes
0answers
40 views

Configuring a Named Credential for Oauth 2.0 callouts from Visualforce

I am trying to set up a Named Credential so that I can make callouts from a Visualforce controller to an external web app using Oauth 2.x. The web application is called Procore. I'm not sure how to ...
3
votes
2answers
146 views

No_Oauth_Token: Access token was not returned

Unable to access sharepoint via Files Connect. A user with System Admin Permission created. Enable Files COnnect in my org. Created a permission set to access Files Connect Online and assigned to ...