OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

0
votes
0answers
6 views

Auto Resize Canvas app after OAuth login

I am using OAuth (vs. SignedRequest) authentication for my Canvas App (an external web app). I am displaying my Canvas app in Visualforce Page. I need help for 2 things. How to get user details like ...
1
vote
1answer
16 views

Rest API returns No_Access error to System Admin for userinfo call

We have used oAuth in our manage package. This package have oAuth flow and it works fine for all client except one. When we call /services/oauth2/userinfo it returns 404 (not found) — No_Access ...
-1
votes
0answers
14 views

Why am I seeing an error with OAuth? [closed]

I have set an OpenID Auth provider for a customer portal. Yesterday, the custom registration handler (auto created) was being invoked after authorizing with the auth provider. Today, after ...
0
votes
0answers
12 views

How to get oauth2 access and refresh tokens in JSON format

Problem I am trying to connect to an external api using oAuth2, and at the moment have the following code I am running from the Execute Anonymous Window. I keep getting a 401 error and I think the ...
1
vote
0answers
18 views

Implementing the self-authorization flow of signed request authentication for a canvas app

I'm working on a canvas app which will allow an existing web app to be viewed through canvas. I have the app working with Signed Request authentication, which works fine when permitted users is set ...
0
votes
0answers
12 views

Handling INVALID_SESSION_ID from the developer end. [duplicate]

In our mobile app, customer is trying to add Lead and Contact to Salesforce and he is getting the below error [{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}] And we are ...
1
vote
0answers
27 views

Salesforce OAuth 2.0 JWT Bearer Token Flow with PHP

Anyone can help me with JWT Token Flow returning an error of {"error":"invalid_client","error_description":"invalid client credentials"} Why am I getting this error ? I suspect that I uploaded a ...
0
votes
1answer
7 views

Visualforce page accessible for other Salesforce profiles integrated with my software

I have my software that is sending data to Salesforce using REST API. This is for now only happening for my Salesforce Profile. I want other Salesforce profiles to be able to integrate with my ...
1
vote
1answer
36 views

Salesforce SAML Assertion - Failed: Missing Consumer Key Parameter

We are developing native mobile app where we are using oAuth token for Salesforce API access. We want to have SSO integrated with some SSO provider like Okta which generates SAML response,where we are ...
0
votes
0answers
21 views

OAuth Named Credential Callout Failure

I have created a named credential that points to the Microsoft graph API. My credential has been authenticated successfully but when I try to use it from Apex it fails. I am unable to debug , The ...
0
votes
0answers
16 views

Salesforce Authorization Error while testing the Test-Only Initialization URL for “Microsoft Translator - Text Translation” API

I am trying to create the Salesforce Auth Service Provider of type Microsoft Access Control Service so that I can do the REST API call to "Microsoft Translator - Text Translation" API. I have done ...
0
votes
0answers
17 views

SoapUI - Community User Login Setup

I want to setup some tests using the SoapUI Tool. The first part of my test involves getting a token for a community user. Since the OAuth flow mechanisms are different for a community user, how can ...
0
votes
1answer
32 views

OAuth worked initially, but failed with 401 on the next day & subsequent

I'm working from https://developer.salesforce.com/page/Integrating_Java_Spring_Apps_on_Heroku_with_Force.com_REST_APIs On the first day, I got everything to work with localhost, so if I opened ...
-1
votes
1answer
38 views

When to use username & password flow to obtain a token

One of ways to get an access_token to use with SFDC Rest Api is to use the Username and password flow, where you use both of these to get an access_token. Its documented here: ...
0
votes
0answers
12 views

SAML assertion via an oAuth2 handshake

I am trying to implement third party app. The concern I am facing is that can we get SAML assertion via an oAuth2 handshake
1
vote
1answer
34 views

Connecting to Salesforce using AngularJS

newb here. I am trying to log in to a Salesforce account using AngularJS ForceNG and pull the data out of an object so I can post it on an Ionic page. I want to hard code the login and password, ...
0
votes
0answers
7 views

Salesforce server change - tied to refresh token?

We use Salesforce refresh tokens to access the Salesforce API on behalf of our users. To determine the API endpoint URL to access, we'll examine the response received when generating an access token. ...
2
votes
1answer
19 views

Enable Google Login for Communities

in my developer org i have set up a community. I also have set up google as auth provider. The auth process is working great for sales cloud users. Speaking of community users there is the problem, ...
1
vote
1answer
40 views

(400) Bad Request when attempting to use refresh tokens

Our application interacts with our clients' Salesforce instances using the REST API and refresh tokens we have stored on our database. Every API request will use that refresh token to get an access ...
4
votes
0answers
51 views

Loading Static Resources When Accessing a Page WIth an OAuth Access Token

If you specify the 'web' scope for a connected app it's supposed to grant/provide access to Visualforce pages. I'm authenticating via the iOS mobile SDK and then attempting to use the access token I ...
2
votes
2answers
25 views

Finding the Salesforce API URL after OAuth

I have completed OAuth for a Salesforce customer, and I have their access_token and refresh_token. But how do I know what API URL to call on their behalf? I.e. ...
3
votes
2answers
117 views

session id or oath token, they not interchangeable?

Very new to Salesforce development. I used a connect app to get Oauth security token in a plugin. I am trying to call an Adobe Salesforce web service that needs a session ID. When I run my plugin I ...
3
votes
1answer
50 views

Authorization for APEX Webservice

We're writing an internal Apex REST webservice to accept POST requests from an external system to call. The kink here is that we cannot control the process in which the external system calls our ...
0
votes
0answers
20 views

Configuring a Named Credential for Oauth 2.0 callouts from Visualforce

I am trying to set up a Named Credential so that I can make callouts from a Visualforce controller to an external web app using Oauth 2.x. The web application is called Procore. I'm not sure how to ...
3
votes
1answer
101 views

No_Oauth_Token: Access token was not returned

Unable to access sharepoint via Files Connect. A user with System Admin Permission created. Enable Files COnnect in my org. Created a permission set to access Files Connect Online and assigned to ...
1
vote
1answer
30 views

How to write Salesforce data using Apex into Google Spreadshee

I need to write data into Google Spreadsheet using Apex but i am not getting pointers. Can any one help me out on below points - 1) How to authenticate Google Account from Apex code? 2) How ...
0
votes
0answers
21 views

Two factor authentication from api

I have enabled two factor authentication on my org and now using authentication app to create time based token and login via salesforce UI. Now I want to do same thing through OAuth 2.0 ...
1
vote
1answer
23 views

Oauth2.0 User Password flow combined with delegated authentication

When using the OAuth2.0 User Password flow and having Delegated Authentication Single Sign-on enabled, will Salesforce by default use the Delegated Authentication to validate the user/password?
0
votes
0answers
32 views

Unauthorized endpoint error even though the remote site has been added

I'm getting the following error authenticating with the UN/PW oauth2 flow (I redacted the actual domain name): Unauthorized endpoint, please check Setup->Security->Remote site settings. ...
1
vote
0answers
31 views

OAuth - getting invalid JSON in response of exchange code

In OAuth 2.0 flow, I am getting invalid JSON in the response when I exchange authorization code for access_token. I am getting following JSON - { "access_token": "<ACCESS_TOKEN>", ...
0
votes
1answer
21 views

Wrong instance url while generating the token for OAuth 2.0 authentication

I am a novice in salesforce. I have access to multiple sandbox instances of salesforce. I am trying to do an OAuth2.0 authentication and call some rest api. But when I request for the token, in the ...
0
votes
1answer
45 views

Username-Password OAuth Authentication is working with the community users?

I need to configure Username-Password OAuth Authentication to get salesforce data with the REST API through a community users. Is is possible to do that?
1
vote
2answers
36 views

Regarding OAuth2 class

I am unable to find official guide containing the description (methods, properties etc) of this Salesforce inbuilt class (OAuth2). Can someone let me know ?
2
votes
1answer
79 views

Can my Connected App be forced to use the stored redirect_uri?

I would like to use the Amazon Alexa voice service to create a voice interface for Salesforce. But I've run into problems. I am reading here: ...
4
votes
0answers
35 views

Custom Domains in web authentication flow

I'm running into authentication issues with users who are attempting to sign into Salesforce on our product using a custom domain (Oauth user-agent flow). From the Salesforce web signin page, the ...
2
votes
2answers
77 views

Determining How/When to Add Consumer Key to OAuth Flow

I hoping to get some best practice related to using a consumer key with a native iOS app and Salesforce.com. The following is relevant to this scenario: A Managed Package (MP) has been created and ...
1
vote
1answer
66 views

oAuth2 auth from AngularJS for Chatter API with AngularJS

I have an AngularJS app in a VF page which will be interacting with the ChatterAPI. Obviously just making a request with Resource returns a 403 since I am not authenticated. The only info I can find ...
0
votes
1answer
37 views

Problem getting AUTH Token

I'm trying to get an Auth Token (using PHP) and having trouble getting back the authorization code so I can make the next call and get the Auth Token. I set up a connected APP in the console and have ...
2
votes
1answer
91 views

oauth consumer key and/or signature not included in request parameters or authorization header

I am calling a REST Api https://www.gliffy.com/products/online/api/apidocs/rest/#oauth which needs oAuthkey and Password. Here is my Class public with sharing class DetailButtonController { public ...
0
votes
0answers
105 views

invalid grant/Authentication Failure with curl

Trying to get my head around the salesforce REST API. I wanted to get a session id to use for subsequent requests. I followed the documentation and tried to use curl for this as seen below. In order ...
1
vote
1answer
105 views

Marketing Cloud oAuth and Refresh token issues (RefreshToken Expires after first use)

Ok.There are questions about this but no answers. I am finding with ExactTarget the refreshToken expires when it is used (Which then I see no reason to use it at all since we would be using clientId ...
0
votes
0answers
20 views

Misbehaving Rest API in production for inbound calls leveraging oauth2 — receiving 403

I have a client that is having problems accessing custom SF Rest API. Login is successful using oauth2 token (services/oauth2/token) with grant_type = password. Attempt to access custom REST API ...
3
votes
0answers
18 views

Any clue as to why I am not able to use heroku environment variables in my jsforce auth function?

So I'm part of a team working on developing an a web app for our client, who uses salesforce as their database. We are using node.js on heroku to act for the server side code. The front end is ...
0
votes
1answer
50 views

Salesforce Oauth on client side

I am trying to authenticate a client in my SPA via Salesforce Oauth all on the client side. Currently, I have been trying to implement the user agent flow and have been receiving many errors such as: ...
1
vote
1answer
29 views

Getting SFDC OAuth login_hint to work

I'm trying to get the login_hint to work when using OAuth, but it seems like SFDC is encoding it during the redirect to the login page in a way that it isn't recognized Here is my url scrubbed of any ...
1
vote
1answer
43 views

Using SOAP login() for authentication in Salesforce oAuth flow

I would like to do a background login of users (using soap login() API) and then use the session to trigger an oAuth flow to receive my access and refresh tokens. Is this feasible and if so how?
1
vote
1answer
58 views

getAccessToken is returning null when using Microsoft Access Control Source

I have set up OAuth with Sharepoint by following a Salesforce tutorial. When I go to the Test-Only Initialization URL, I am successfully directed through the OAuth process and end up at the Callback ...
4
votes
1answer
344 views

OAUth Issue: OAuth_Approval_Error_Generic

So I'm using the iOS Mobile SDK. I had an app working without issue, then changed the Consumer key to that of a different connected app (i.e. changed away from the default sample one) and updated the ...
0
votes
0answers
18 views

display popup is not working oauth

Does anyone know how open RemoteAccessAuthorizationPage.apexp in popup, when using OAuth2 (it does not work if i put in ...
0
votes
0answers
35 views

omniauth-salesforce returns invalid_credentials even though user successfully logged in

I am trying to allow users to use salesforce to authenticate. I am using the ruby gem omniauth-salesforce. The user clicks my login using Salesforce button, they are redirected to the salesforce ...