OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

2
votes
1answer
26 views

OAuth Username-Password Flow - Inconsistent login failure

Noticing this behavior in my Full Sandbox after refreshing it. Whenever a third party application is trying to loggin using OAuth Username-password flow it gets the below error 3 out of 5 times. But ...
0
votes
0answers
18 views

Can an API user be set inactive automatically? API returned “cannot reparent record” for active user

I have a web application that uses the Salesforce API to create Contact, Account, Opportunity records. We set up an administrator user with full permissions to use as the Oauth login user, and I use ...
1
vote
0answers
19 views

Salesforce OAuth Refersh Token - Invalid Scope

I'm trying to get Referesh Token as part of scope but I'm getting following error error=invalid_scope&error_description=the%20requested%20scope%20is%20not%20available This is my request ...
1
vote
1answer
23 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
2
votes
0answers
26 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
2
votes
2answers
19 views

What's the flow for refreshing access token with a refresh token?

So, suppose I managed to get refresh_token, what happens now: Should I perform a new access token request every time I connect (so I send the refresh token before connecting, every time) Try if the ...
1
vote
2answers
18 views

Validate portal users using OAuth 2.0

How can i validate portal users using OAuth 2.0? My current implementation is to send request to login.salesforce.com as : ...
2
votes
1answer
60 views

How to create a managed application and namespace for REST API

I am following up the post here: REST API without Connected App Although the answer was very helpful, I'm new to SF and need some clarity on some things: 1. How and why can a separate (free ...
2
votes
1answer
37 views

SAML Bearer flow problems?

I'm trying to follow this guide: SAML Bearer Flow I have the following PHP to build the assertion and post it: //header('Content-type: text/xml'); $assertion = ...
2
votes
2answers
32 views

OAuth JWT returns the same session ID on multiple requests

I am trying to connect to Salesforce from an external server and I am doing this via the OAuth 2.0 JWT flow to gain authorization into Salesforce. I construct the JWT token from the external server ...
1
vote
1answer
60 views

Viewing sharepoint documnets in Salesforce using Files Connect

I want to view my Sharepoint documnets in salesforce using "File Connect" introduced in Winter15 release for connecting to External Data source but i am facing a problem to connect to sharepoint. I ...
3
votes
1answer
24 views

SiteAuth UserAgent Test Class Creation

I'm new in creating SiteAuth userAgent test class creation. public SiteAuthControl() { if(!Test.isRunningTest()) { string userAgent = ...
0
votes
0answers
55 views

Best API to use Send/Receive Salesforce Data

I'm working on getting a Salesforce API key currently so that I can develop a web-based application (probably php) to streamline a currently tedious process. My current workflow is as follows: Open ...
1
vote
1answer
125 views

Why isn't curl getting the session id?

curl -v https://test.salesforce.com/services/oauth2/token -d "grant_type=password" -d "client_id=" -d "client_secret=" -d "username=" -d "password=" I've tried this with instance name instead of test ...
1
vote
0answers
25 views

Accessing Salesforce session via oAuth maintains session across browsers

I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce ...
0
votes
0answers
22 views

How best to secure client_id + secret using - Rails + Restforce

I've successfully managed to set up an app using my developer account - it is currently making use of Ruby on Rails 4.2.beta2, ejholmes most excellent gem restforce and the very helpful tutorial and ...
2
votes
1answer
85 views

Safest way to see if a user is still “logged in” (REST API)

I'm using the Salesforce REST API along with OAuth 2.0 User-Agent Flow. I have the need to "ping" Salesforce to see if a user is logged on (this is the simplest way to do so in my application). If the ...
2
votes
1answer
74 views

Static authorization token for REST API from external system

I am integrating an external system and they gave me an authorization token. I set the authorization token and it is working fine. I used SetHeader in HttpRequest. Now they want to send a REST ...
2
votes
0answers
15 views

Using the REST API, how can I tell that a user has blocked OAuth access vs revoked OAuth access?

It seems that I get the same authentication error message the token is invalid. Is there a way I can tell the difference as the vendor? Note that I am not referring to an Apex app. My app is purely ...
1
vote
1answer
27 views

What happens to Salesforce OAuth tokens when a user blocks your app or revokes access

I have a non-Apex app that relies on OAuth only. I'm trying to test out what happens if the user revokes access or blocks the app and/or then unblocks the app. In my limited testing, it seems that I ...
2
votes
1answer
82 views

Java Code to check validity (expiration) of access token using rest api

I am using username/password flow . I am getting access token . But when will that access token expires, so that I can request for new access token. i don't want to get access token with each request ...
3
votes
1answer
84 views

API calls and user context

Overview: Mobile device (call service on ESB) —> ESB (calls salesforce API to get data) —> Salesforce.Mobile devices and Salesforce supported by the same IdM system. Description: A custom API ...
3
votes
1answer
101 views

Instance Url related error when connecting to SOAP API using Access Token in Python

I am using salesforce-python-toolkit to connect to Salesforce SOAP API. I know how to connect to it using [user, password and security token]. But recently I have learned that I can connect to soap ...
2
votes
1answer
127 views

OAuth JWT Token Bearer Flow returns Invalid Client Credentials

I am trying to use OAuth JWT Token Bearer Flow to connect to the Salesforce REST API from C#. I have configured a Connected App within Salesforce and uploaded the certificate used to sign the token ...
0
votes
1answer
38 views

“App must be invoked via a signed request” shows in Canvas Previewer

I have connected App and added external link of Heroku to show as Canvas App. I have set the location Chatter Tab. In the developer account, my external application is accessible. It has set "Admin ...
0
votes
0answers
66 views

SFCrypto “keychain data missing or corrupted”

Intermittently getting the following error when logging in to iOS iPad app using Salesforce Mobile SDK. 2014-10-01 16:35:32:177 iPath[3381:60b] ERROR|SFCrypto|App id keychain data missing or ...
0
votes
0answers
17 views

How to test OpenID connect in sandbox?

I want to enable openid connect in Salesforce (google as the provider) Before doing that, I want to test it Can I test it in Sandbox?
1
vote
1answer
184 views

Getting remote access authorization error with Mobile SDK on iOS

When this happens during oauth on iPad, clicking the Not You link and reentering the username/pwd takes the user to a full screen web view of the Salesforce UI instead of my mobile app!!! Ugh! So I'm ...
1
vote
1answer
68 views

Revoke Refresh token not working

So I have a refresh token and it is showing under the user in the oAuth Connected Apps related list. I am sending this code to revoke but the oAuth Connected Apps still shows it in the list (yes I ...
2
votes
2answers
86 views

How to skip login and remote authorisation pages when authenticating using oauth webserver flow?

I want to access a rest webservice hosted in a salesforce org from another Salesforce org. I am using the web server flow for authentication. When hitting the authorisation URL, I am redirected to a ...
4
votes
1answer
184 views

Has anyone got the OAuth 2.0 JWT Bearer Token Flow to work initiated from Apex code now 'RSA-SHA256' signing is available?

This year old thread Connect apex and Google API using JWT to retrieve Oauth 2.0 token was started before the Crypto class included the 'RSA-SHA256' signing algorithm. Now that this algorithm is ...
1
vote
1answer
69 views

@future invocation of REST service on same org - how to get accessToken?

I have a business requirement to attach a pdf document (visualforce rendered as pdf) to Notes and Attachments on a record when that record gets updated. Since we can't use getContentAsPDF() in the ...
6
votes
2answers
250 views

“Session expired or invalid” problem calling an @RestResource from Apex in Winter '15 preview; UserInfo.getSession returns null for Force.com Sites

Based on threads such as Calling Apex Rest custom web service from Apex code we have HTTP calls in our Apex code (contained in a managed package) back to the same org authorized like this: ...
2
votes
1answer
159 views

Access REST API after Single Sign-on (SSO)

We have a heroku-hosted web app that used Salesforce as Identity Provider (IdP) to do Single Sign-On (SSO) between SFDC & other services. We know that in doing so our web app user are already ...
0
votes
0answers
109 views

Getting an INVALID_SESSION_ID: This session is not valid for use with the API error in managed package

I have a managed package which is calling the SOAP api using the current users session ID through the ajax toolkit. In certain orgs users are getting the following error when they load the app. ...
1
vote
0answers
39 views

Parameters set through the canvasApp in VF page not recieved in the connectedApp's client code

I am new to Canvas framework and stuck with some basic requirement I have created a connected app to integrate my application with salesforce through oauth flow. callback url destination is the ...
3
votes
1answer
77 views

OAuth2 Refresh Token Flow with Communities

I'm trying to satisfy a requirement for providing an API for communities users, where they can log into Salesforce, retrieve some data, and provide that back to a client. I have two questions around ...
2
votes
1answer
207 views

OAuth2 Refresh Token Flow - Unsupported Grant Type

I am attempting to obtain a token, using the Oauth 2 refresh token flow. I am using the REST Console in Chrome to perform the following POST operation: My URI is ...
1
vote
0answers
50 views

Finishing authentication after user is prompted to change password

My SF app is only the login page. All the access of the data is done using SF REST API. Our login page is a custom VF page. The problem is when the user first logs in, she receives the change password ...
1
vote
1answer
120 views

Is there anyway to check if an access token is valid or not?

I got an access token from Salesforce and now I want to check if it's valid or not. How can I do this? Updated question. I have a client application and a server. The client requests an access token ...
0
votes
0answers
60 views

Oauth WARN [HttpMethodDirector] Unable to respond to any of these challenges: {token=Token}

I'm just a beginner with Salesforce Oauth. When I try to get the access token with username/password flow everything seem good. This is out put: > Status-Code: 200 Auth response: { "id": ...
0
votes
1answer
57 views

Get SFDC sessionID via access token

As the title. I'm using username/password flow to request an access token. So how can I request a SFDC sessionID from that token?
2
votes
1answer
125 views

redirect uri mismatch in google oauth 2

i am trying to implement google oauth2 .i created a web application whem it redirect to OAuth login screen its giving me error : "redirect_uri_mismatch".here is screen shot but in google console my ...
6
votes
1answer
371 views

Fetch image from Rich Text Field

I have built an export/import tool for Knowledgebase articles using Partner API. Everything works fine, the only functionality I can't produce is the ability to export images, hence obviously I can't ...
2
votes
1answer
89 views

Unable to create a Connected App: “The application name has been used before” even when it has not

I managed to add a connected app in a sandbox instance but when I try to add one in the production instance, I receive this error. The application name [name] / [API name] has been used before. ...
1
vote
0answers
32 views

Canvas App OAuth Fails in Salesforce1

I have a canvas app I am making Salesforce1 compatable. Things work fine when I log in to the desktop and use it is "Salesforce1 mode", but when I try and access it in my Salesforce1 with my dev org, ...
2
votes
0answers
39 views

Salesforce1 3rd party OAuth callback

I have a HTML/JavaScript app that runs (part of a VisualForce page) inside Salesforce1 that needs to also authenticate with another web server using OAuth. However, I have not found a way to set the ...
0
votes
1answer
119 views

Make Restful call with Parameters

This is essentially part 2 building from my earlier question. Call Restful SFDC service from Java I successfully got my service to authenticate. I also got my service to successfully call a post ...
2
votes
1answer
207 views

SalesForce OAuth Endpoints

I am working on an application, where any user can login into my application through Salesforce. As per mentioned in below url, We can use https://login.salesforce.com or for sandbox ...
4
votes
1answer
150 views

How to do oAuth within Visualforce and be redirected back to the visual force page

FINAL* Ok, so first lesson, do not stay up to late Second for those that may need: First URL needs to end in authorization This returns a CODE the second needs to be an HTTPRequest with response ...