I have a Detail Page Button on the Opportunity object that opens a url for conga composer. this is the button's code:


On classic Salesforce this button opens a new window with conga and all is well. When I move my UI to lightning experience, this button does not work - I get this error:

Invalid session or the session has expired. (Lock IPs may be enabled.)

enter image description here

I have searched for this error message and came to a few web pages (Conga web site, Salesforce) that explain to do :

  1. Ensure "Lock sessions to the IP address from which they originated" is NOT enabled
  2. Ensure the user running the solution has "API Enabled" on their Profile
  3. Ensure you have not reached your maximum API request limit
  4. Check to see if your Salesforce server is down

Now all of these settings are ok in my user and profile and org, also - in classic it works perfect.

I have also checked the URL that is generated from the button - it is the same from classic and LEX UI:


Why doesn't the conga button work from LEX?

2 Answers 2


Conga's support site indicates that the session id button doesn't work in lightning, and that the oauth form must be configured and used. composer button help

  • One additional item to consider, you cannot use Report Data in Lightning as you cannot Export Reports. For any related data, you will also need to migrate your reports to SOQL queries
    – CongaPete
    Commented Dec 1, 2016 at 22:58
  • Does this fix work in professional edition as it doesn't have access to VF/Apex? It doesn't seem to recognize the URL I create based off of the info in the link here.
    – dphil
    Commented Mar 26, 2019 at 16:52
  • Link broken and I can't find an update. This is a good example of why it's important to relate the relevant information here. A quote and bit of instruction would've kept the answer alive.
    – isherwood
    Commented Dec 7, 2020 at 15:21
  • Here is the details from the original link: OAuth (Open Authorization) is a different security protocol that is required for all Conga Composer buttons created in the Salesforce Lightning user interface. The Base URL of an OAuth button looks like this: /apex/APXTConga4__Conga_Composer ?serverUrl={!API.Partner_Server_URL_370} &id= The &Id= parameter (or &id= in the OAuth button) defines your master object – the Salesforce® object from which you will launch your Composer solution. The value of this parameter will always be the ID of your master object.
    – JimRae
    Commented Dec 8, 2020 at 16:36

Conga Documentation:

Disable the "Lock IP Address" setting for hosted AppExchange applications.

  1. Navigate to Salesforce Setup > Administration Setup > Security Controls > Session Settings.
  2. Ensure that the "Lock sessions to the IP address from which they originated" field is NOT checked.
  3. Save. Convert your non-OAuth buttons to OAuth buttons for Lightning. You must RESTART all instances of the browser for the setting to take effect.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .