I am using the Lightning interface and have created a Canvas app and a VisualForce page to show it. When I view the page, my external URL receives two parameters:
_sfdc_canvas_auth: user_approval_required
loginUrl: https://login.salesforce.com/
I was expecting to receive a signed_request
parameter which I can test my secret against.
Having searched around I've found this occurrs when the "Permitted Users" is set to "All users may self-authorize", whereas it seems I need to set it to "Admin approved users are pre-authorized" so that users don't need to approve it. Where can I set this? Or is this the wrong solution?