2

How can you implement/integrate with web-site (third party) without using oAuth and I know that by enabling oAuth you can define the callback url and all good but I'm in a situation that third party application does not have the capability to handle oAuth in that case what should be my approach for the Canvas App?

Any suggestions?

  • Iframe it ...Thats it ..Canvas asks for some code and work from other end .If not you just iframe it .Looks hackish but thats all you can do – Mohith Shrivastava Apr 29 '16 at 17:13
  • my understanding was you have two options when it comes to canvas app, signed request and oauth? is that not correct? – Nick Kahn Apr 29 '16 at 17:16
  • That's correct but for signed request you still need some work on other end .. – Mohith Shrivastava Apr 29 '16 at 17:16
  • Nick, do you have an explicit requirement that it must be a Canvas app? Could you use a Web Tab instead? – Mark Pond Apr 29 '16 at 17:17
3

Canvas App Implementation supports Signed Request .Using Signed request ,the client end app can verify the request .

This will still needs some work on the other end to verify the signed request using the consumer secret generated from the connected app.

Else if you dont need user identification , a simple iframe or web tab should help

  • okay i did changed it to signed request and unchecked the oAuth and now throwing me an error if i unchecked the oAuth setting Oops, there was an error rendering Force.com Canvas application [external_App_Local]. Force.com Canvas can not locate an installed canvas app with the namespace [] and API name [external_App_Local]. yes the error is very obvious that its not finding my canvas app but i have triple check the api_name and its exact the same but not sure why its throwing me this error. also if i Check the oAuth back then the error is not throwing... making me crazy – Nick Kahn Apr 29 '16 at 17:36
  • You still need the oauth setting .You may not go through oauth flow but keep it .So the oauth URL is same as the canvas URL – Mohith Shrivastava Apr 29 '16 at 17:37
  • oh interesting.... so in other words i have been doing 'signed request' not the oAuth – Nick Kahn Apr 29 '16 at 17:40
  • 1
    Yes .So in oauth you redirect back the user to login of SFDC and if user is logged in ,here will explicitly approve for the first time and confirm the access to the SFDC – Mohith Shrivastava Apr 29 '16 at 17:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.