OAuth 2.0 is the next evolution of the OAuth protocol and is not backwards compatible with OAuth 1.0. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.

learn more… | top users | synonyms

1
vote
1answer
14 views

Creating a standalone java client of salesforce chatter using rest Api

EDIT I am struggling to add the correct formatting to the code post below. if someone can edit this question and apply the proper formatting to code, i would appreciate it. I am fairly new to ...
1
vote
1answer
75 views

400 Bad Request in Response

I have been using working on an Applicaion in angularjs, and While getting response of 2nd request for the token, I am getting following an error. Illegal Request You have sent us an Illegal URL or ...
2
votes
1answer
45 views

Authentication and Access Salesforce Account through Other Portals

I am developing an application in Angularjs and my requirements is to get login in my application through SalesForce, and access data of SalesForce. I have created developer account in Salesforce and ...
0
votes
0answers
7 views

SCIM protocol release date

As found in case SF API for SCIM, SCIM is currently in pilot phase. Is there known release date for protocol ? Are there plans to support SF as SCIM CSP or also ECS ?
1
vote
0answers
13 views

User-Agent OAuth Authentication doesn't provide expires_in data

I'm using the User-Agent OAuth Authentication work-flow, and when receiving the authentication code, Salesforce is not sending me the expires_in data. Here's what my Salesforce response looks like. A ...
3
votes
3answers
151 views

What's the difference between these authentication endpoints?

Based on the information in the Salesforce rest-API documentation, examples of valid restful endpoints for authentication are: For authorization: ...
1
vote
1answer
38 views

In what case should OAuth 2.0 Refresh Token Flow be used?

I am now using web server authentication flow along with refresh token flow in my system. Once a user granted a permission for the app to access, the app will request a permission, an access token and ...
4
votes
1answer
26 views

OAuth Mechanism,User and password flow

I am using user pasword login authentication mechanism.I am doing this between two salesforce org.I have done the initial setup and I will be using Rest Api's. I can see instance and access token in ...
1
vote
0answers
11 views

Salesforce to Salesforce Oauth Webserver flow? Is it possible?

Is it possible to integrate Salesforce to Salesforce using Oauth Webserver flow? We cannot use the standard S2S(Salesforce to Salesforce) feature due to certain limitation.
7
votes
1answer
142 views

Prevent auto-authenticate using OAuth 2.0 Web Server Flow?

We're trying to override the auto-authenticate behavior when kicking off a web server flow in the REST API. Basically, we need to let a user authenticate and capture OAuth tokens to several Salesforce ...
1
vote
0answers
40 views

Multiple Connected apps for oauth

I have a web application that has a mobile component. Both of them have Salesforce oAuth and use different connected apps. Sometimes users authenticate only via the mobile app and their credentials ...
1
vote
1answer
46 views

Where do I find the client id and client secret of an existing connected app?

Where do I find the client id and client secret of an existing connected app? The documentation talks about this information being provided when creating a new app, but what if my app already exists? ...
1
vote
1answer
52 views

Salesforce Communities - Login With Salesforce

Scenario: I want users to log-in into community via. standard log-in options, + with Salesforce (if they have Salesforce Account) as shown below: Now, in case i choose both the options in Login ...
1
vote
1answer
38 views

How does one log out on the client browser without revoking a refresh token?

How does one log out on the client browser without revoking a refresh token? I want a refresh token to be always available (so never revoke it) since multiple users will have the same account. So ...
0
votes
1answer
61 views

How to call REST webservice without username and password in request -

I have created one restful class: @RestResource(urlMapping='/showAccounts/*') global class ExRestController { @HttpPost global static List<Account> getAccounts() ...
3
votes
2answers
52 views

Canvas Signed Request not sending refresh_token

I have a canvas a app that I distribute via a managed package on the AppExchange. The canvas app is configured to post a signed request to my heroku app. I have selected all the oauth scope options: ...
2
votes
1answer
58 views

Failed refresh of access tokens on some accounts

We have a large amount of users connected to our registered app (using the OAuth 2.0 authorization code grant type). Nearly all of them refresh regularly with no problems. However, with 6 of those ...
0
votes
1answer
21 views

Do you require to register as a partner to consume user data using OAuth?

I am building an app that takes user data from salesforce using OAuth. Is there a way to do it without registering as a partner?
0
votes
0answers
33 views

Salesforce oauth “integration user” security

I will need to make api calls to salesforce from my external java application for which I plan to use oauth. I was going through some posts which state that one could use "integration user" like Post ...
0
votes
0answers
26 views

Authentication callback happens too late

I'm developing an android hybrid local app with SmartSync/SmartStore using AngularJS. The only place I've found where I can initialize the Force object is in the callback supplied for ...
2
votes
1answer
147 views

OAuth2 token request using JSON fails - grant type not supported

I'm building a small application in Go that will access Salesforce using REST. I chose to use the full OAuth webflow. Documentation for the Web Server Authentication Flow I'm able to do the full ...
4
votes
0answers
84 views

Mule SFDC Connector without user interaction using sfdc:config-with-oauth

I am trying to access Salesforce through my Mule flows using "sfdc:config-with-oauth". Is there any way I can achieve this without redirecting the user to a Login page? I know there is a SSO login ...
2
votes
1answer
53 views

OAuth callback through HTTP (not SSL) is possible?

In short: I need to set a Connected App to later use OAuth Web server Flow. The callback URL should be HTTP. My web server does not have a SSL certificate and I not able to get one. But SF give me ...
1
vote
0answers
27 views

Consuming parameters received from apex:canvasApp in OAuth 2.0 authentication mode [duplicate]

I have created connected app that would like to be rendered over Canvas mode. In Canvas configuration I have selected OAuth 2.0 as an authentication mode. I have created action linked to following ...
8
votes
1answer
86 views

OAuth Connected App without Identity Provider Enabled

Working on a project where the client wants to be able to use OAuth to login to an external website backend. The documentation for setting up OAuth doesn't actually mention enabling the IDP so I'm ...
1
vote
0answers
36 views

Force.com OAuth Endpoint Configurable

I want to make my Force.com OAuth endpoint applicationContext configurable so it can change to http://test.salesforce.com when someone select to login to their sandbox environment. Below is the the ...
0
votes
0answers
25 views

Getting Refersh token via OAuth flow

Is there any way to get the refresh token using the OAuth refresh token flow for portal users. Any suggestions. Thanks Sathish
4
votes
1answer
64 views

Using LinkedIn for social login to salesforce

so i have been looking for solutions all over the web to try and find the solution to this simple question: how do i use linkedin as a social login method for any salesforce app/portal/community i ...
0
votes
1answer
17 views

Create a TriggeredSend Definition Fatal error: Call to undefined method WSSESoap::addOAuth() in /ET_Client.php on line 165

I'm trying to set of a TriggeredSend definition. After a lot of playing around I got the system to load the ExactTargetWSDL.xml. Now I've got this error showing up, and i'm not sure why. Create a ...
0
votes
0answers
55 views

Logging partner community user in via oAuth from rest console

I have set up a community and wish to access it via oAuth. Using the flows mentioned in the documentation I have no issues. Everything is good. However I want to be able to login and then access my ...
2
votes
1answer
161 views

Salesforce1: Open current object in safari browser with login

We are developing mobile friendly visualforce page. Due to the UIWebview issues with iOS7.0/7.1 there are some components which does not work as expected. Though 7.1 update fixed a lot of issue, still ...
3
votes
1answer
107 views

Using Restforce gem with SalesForce API and Oauth 2.0

I'm trying to use Restforce (https://github.com/ejholmes/restforce) to set up integration with my Rails app to SalesForce's API using Oauth 2.0. Restforce describes the initialization process as ...
2
votes
0answers
22 views

RemoteAccessAuthorizationPage Not Coming after login

I am using User-Agent OAuth flow for authenticating a community user so that he can access a native android client built using MobileSDK. Also, I have a custom login page for community which redirects ...
3
votes
2answers
180 views

How and when does a Salesforce SAML / OAuth2 user give permission to use a connected app?

We created a Salesforce Connected App which should get its access token using SAML / OAuth2. The request looks as follows: ...
2
votes
1answer
74 views

Does OAuth token (from mobile SDK) still work in local browser?

I'm working on the Mobile app development. Here is my issue: We have got a token through the OAuth flow in App using SDK. There is a link in app named "user info", user tap that link and open a ...
1
vote
0answers
15 views

Clipped oauth response in user-agent flow?

I'm developing an app that authenticates to salesforce using the oauth2 user-agent flow. It works fine most of the time, but in the last fe days, sometimes I get clipped data in the url fragment. It ...
2
votes
1answer
70 views

obtain refresh token with no redirect url?

Is there some website I can temporarily use as a redirect url? I am creating an app that has no web pages and I just need a refresh token so the app can stay connected pretty much forever to sales ...
2
votes
0answers
214 views

OAuth 2.0 JWT Bearer Token Flow

I'm trying to perform the OAuth 2.0 JWT Bearer Token Flow: https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm&language=en_US But I'm having this issue: ...
2
votes
1answer
211 views

Calling REST API in Canvas with OAuth Webflow (GET)

I am developing a canvas application. For various reasons, I am hosting my application on a static host and use services as back-end. Therefore I am simply using OAuth Webflow (GET) instead of Signed ...
0
votes
1answer
58 views

Sales Force Rest API: Issue with OAuth2.0 Login

Request End Point: https://login.salesforce.com/services/oauth2/token grant_type=password&client_id=xxxx&client_secret=xxxx&username=xxxx&password=xxxxx Response { id: "" ...
1
vote
1answer
41 views

Passing Login info into Force CLI

Is it possible to hack the Force CLI to pass login info in from the command line? Looking at the code here, you can see that its using oauth2 to get a token. Maybe there is a URL hack to pass the ...
2
votes
1answer
74 views

Which OAuth2 grant type is appropriate for background job processing?

If I want my application to process jobs and send API REST requests to my APEX endpoints, which OAuth2 authorization/grant method should I use? If I use authorization_code, then the browser needs to ...
3
votes
2answers
161 views

OAuth 2.0 (or similar) without security token

This article about oAuth 2.0 says , that user must provide security token to log in. Can i somehow disable usage of security tokens? I don't want my users to perform unnecessary operation. Or may be ...
0
votes
2answers
495 views

Hello World Custom Rest Api endpoint not working

Salesforce provides a example of how to define a custom rest endpoint and how to make calls to that endpoint. It is not working for me. Why? I have successfully retrieved an OAuth token that I have ...
3
votes
1answer
110 views

Store Salesforce credentials

I'm building an application in PHP and MySql that will allow people to sign in with their Salesforce ID, Password and Token and then they will receive a report based on their contacts and ...
3
votes
0answers
557 views

“Unauthorized endpoint, please check Setup->Security->Remote site settings. endpoint = https://login.salesforce.com/services/oauth2/token”

I am following web-server authorization flow for establishing the connection between one org to another org. as a 1st step i have get authorization code,when i am proceeding to 2nd step, getting above ...
10
votes
1answer
72 views

How workbench is able to log into Salesforce with OAuth

I have been trying to fiddle with OAuth user-agent flow and understand that you need to have a connected app defined in Salesforce. You would then use the client secret from that in your app to be ...
4
votes
0answers
929 views

refresh_token flow always returns expired access/refresh token

I'm trying to get the refresh_token flow working to obtain a new access token but I always get this error: {"error_description":"expired access/refresh token","error":"invalid_grant"} I'm ...
0
votes
1answer
44 views

What is OAuth 2.0 and what is the difference between Oauth Authentication and Authorization

Please give me a brief idea about the Oauth authorization and authentication and what are the different ways of using OAuth.
9
votes
3answers
264 views

Why Salesforce.com logs the user in automatically after his/her session has been invalidated?

I'm logging in users via REST in my .NET application. For that in the WebBrowser control constructor I do the following: string server = "https://login.salesforce.com/"; var authURI = new ...