How can you implement/integrate with web-site (third party) without using oAuth and I know that by enabling oAuth you can define the callback url and all good but I'm in a situation that third party application does not have the capability to handle oAuth in that case what should be my approach for the Canvas App?

Any suggestions?

  • Iframe it ...Thats it ..Canvas asks for some code and work from other end .If not you just iframe it .Looks hackish but thats all you can do Apr 29, 2016 at 17:13
  • my understanding was you have two options when it comes to canvas app, signed request and oauth? is that not correct?
    – Nick
    Apr 29, 2016 at 17:16
  • That's correct but for signed request you still need some work on other end .. Apr 29, 2016 at 17:16
  • Nick, do you have an explicit requirement that it must be a Canvas app? Could you use a Web Tab instead?
    – Mark Pond
    Apr 29, 2016 at 17:17

1 Answer 1


Canvas App Implementation supports Signed Request .Using Signed request ,the client end app can verify the request .

This will still needs some work on the other end to verify the signed request using the consumer secret generated from the connected app.

Else if you dont need user identification , a simple iframe or web tab should help

  • okay i did changed it to signed request and unchecked the oAuth and now throwing me an error if i unchecked the oAuth setting Oops, there was an error rendering Force.com Canvas application [external_App_Local]. Force.com Canvas can not locate an installed canvas app with the namespace [] and API name [external_App_Local]. yes the error is very obvious that its not finding my canvas app but i have triple check the api_name and its exact the same but not sure why its throwing me this error. also if i Check the oAuth back then the error is not throwing... making me crazy
    – Nick
    Apr 29, 2016 at 17:36
  • You still need the oauth setting .You may not go through oauth flow but keep it .So the oauth URL is same as the canvas URL Apr 29, 2016 at 17:37
  • oh interesting.... so in other words i have been doing 'signed request' not the oAuth
    – Nick
    Apr 29, 2016 at 17:40
  • 1
    Yes .So in oauth you redirect back the user to login of SFDC and if user is logged in ,here will explicitly approve for the first time and confirm the access to the SFDC Apr 29, 2016 at 17:45

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .