I'm trying to satisfy a requirement for providing an API for communities users, where they can log into Salesforce, retrieve some data, and provide that back to a client. I have two questions around this that are related.

1) Can Salesforce Communities users log in with OAuth2 and the refresh token flow?

I found the following contrary point, but it is for username / password flow and not the refresh token flow: https://salesforce.stackexchange.com/questions/19121/should-oauth2-with-grant-type-password-work-for-high-volume-customer-portal

2) And a follow up to the above question: Can the OAuth login page be branded?


Yes, Communities users can use OAuth 2.0. Instead of login.salesforce.com, Use the Community URL as the prefix to the authorization URL - for example, https://acme.force.com/customers/services/oauth2/authorize. See the section Configuring Authentication Flows with OAuth in Getting Started With Communities.

Yes, the Community login page can be branded. See the section Customizing Communities Login in the same doc.

  • 1
    Clarified this as well. Just a note that the branding applies only to the communities / site page and not, for instance, test.salesforce.com. Makes complete sense, but an important distinction. – James Loghry Aug 30 '14 at 1:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.