Following are the steps I am doing:

  1. Get the Salesforce Session ID through SAML Handshake using SAML attributes
  2. Trigger REST API using that session ID

curl https://my-communities.force.com/services/data/v20.0/query/soql_query_here -H "Authorization: Bearer SessionIDHere"

Curl call to the API responds with an error

[{"message":"This session is not valid for use with the REST API","errorCode":"INVALID_SESSION_ID"}]


  • The issue is specific to Community users
  • The issue started happening after 30th Nov 2017
  • This has nothing to do with OAuth flow

I am not sure anything has changed from settings or from Salesforce release side, any help with this.

  • Have you found a solution for this? – Hasantha Jan 4 '18 at 23:42
  • Need answer for this. Someone pls answer – Mr_Perfect Mar 16 '18 at 12:49
  • 1
    Obvious, but does the corresponding user Profile have "API Access" permission? – dzh Apr 14 '18 at 3:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.