We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

Filter by
Sorted by
Tagged with
0
votes
1answer
25 views

Authenticate Calls made to Salesforce webservice [duplicate]

I am using this exact example from trailhead https://trailhead.salesforce.com/en/content/learn/modules/apex_integration_services/apex_integration_webservices @RestResource(urlMapping='/Cases/*') ...
0
votes
1answer
36 views

How to send authorization to web app using Rest API [closed]

This is my first time working with API and I'm trying to understand how to send authentication to an web app using REST API. Questions I have: Do I need to setup Oauth in Salesforce in order to ...
0
votes
1answer
35 views

How could I identify when a user does an operation through data loader? [duplicate]

In our org, we are trying to block some triggers when an account is being updated through data loader. Our strategy was to get the logginHistoryId with getCurrentSession method from the ...
0
votes
3answers
43 views

Unable to login using Frontdoor.jsp

I have a usecase where I need to enable internal users to login to Salesforce using a branded login page. We have built this login page(html) in our website using Angular.js with its own custom ...
2
votes
1answer
39 views

ERROR running force:auth:jwt:grant: Destination URL not reset. The URL returned from login must be set

I'm trying to setup CI/CD with Jenkins for the first time. I already have a valid script running in Bitbucket Pipelines, but now we need to move to the client provided Jenkins server. This is my ...
1
vote
1answer
71 views

What is “Sfdx Auth Url” attribute used for?

Till now, I have been working with SFDX orgs using JWT cert based auth auth:jwt:grantor authenticating using browser using auth:web:login I recently came across the --verbose attribute which gives ...
0
votes
1answer
30 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
0
votes
0answers
18 views

Got a blank screen when connecting with the iOS app?

In the SF iOS app, when I login on certain networks, I get a blank screen. I used the Authenticator app and enabled it in my account first; while on certain networks I can get into it, other ones I ...
2
votes
1answer
40 views

Pardot authentication api not working with correct username and password

I'm having trouble getting the pardot authentication API (v4) working. After triple checking I'm sure I'm using the correct credentials. Making a POST to https://pi.pardot.com/api/login/version/4?...
0
votes
1answer
31 views

How 3rd party should authenticate with custom Apex REST API [closed]

When using @RestResource to create a custom REST API which is exposed externally using a public site. How should the third party service (ESB) authenticate with Salesforce so that it can use the ...
2
votes
3answers
101 views

What method to use in a batch apex in order to get authentication token from a remote server?

I have a batch class that uses query locator to send data into the client's server. however, it must first authenticate and get access token and send that along with the data with all consecutive post ...
1
vote
1answer
44 views

Decode JWT received from /v2/authorize

I'm developing an app for SalesForce Marketing cloud. For the authentication I have a web page loaded as iframe in the salesforce mc; in this page the customer performs the login to my platform. ...
3
votes
1answer
47 views

Is OAuth 2.0 User-Agent Flow truly an Implicit Grant Type?

Is the Salesforce User-Agent Flow truly an "Implicit" grant type? It can most definitely issue a refresh token. And yet per RFC 6749 Section 4.2 Implicit Grant documentation... The implicit grant ...
0
votes
0answers
22 views

Auth Provider for Trello?

I've spent too many hours today trying to set up an Auth Provider + Named Credential for Trello's auth flow... I guess my question is, for those who have dealt with Auth Providers in SFDC, is this ...
0
votes
2answers
60 views

JWT Authentication in salesforce

I am trying to log in another user in my same org using below code. String username = 'test1@salesforce.com'; String jwtVal = '*****'; String tokenEndPoint = System.URL.getSalesforceBaseURL()....
3
votes
1answer
89 views

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

I'm trying to write Apex code that'll call an external API. The API is using OpenID Connect for authentication, meaning I'll have to first give consent in order to get an authorization code, then ...
12
votes
3answers
3k views

Mavensmate: Getting error client identifier invalid while authentication to salesforce

I use Mavensmate, Since morning it is throwing me an error "client identifier invalid" while refreshing or saving any component (Apex Class, Trigger or any) to Salesforce from Sublime. When I try to ...
0
votes
0answers
34 views

Require 2FA only outside of Trusted IP Ranges, using authenticator app 2FA (e.g. SF Authenticator push notification)

We've decided to use the Salesforce Authenticator app for 2FA for our internal users (reasons below), but want to make the process more convenient by bypassing 2FA when users are logging in from ...
4
votes
1answer
56 views

Determine whether running user is logged in from within Trusted IP Range (from Apex)

I am creating a Login Flow that invokes Apex to do some processing, and need to determine whether the running (logging-in) user is connecting from an IP address whitelisted in our org's Trusted IP ...
0
votes
1answer
78 views

Native Android/iOS Authentication with Authenticated Site/Customer Portal

I am working on integrating a native android and iOS project into a Salesforce environment. We have successfully ran the forcedroid and forceios commands to get functioning projects and have been able ...
0
votes
1answer
42 views

Login Discovery page— Need to provide userId twice for login

i have implemented login discovery page which will ask to enter ferdation id and once fedrationid enters it will redirect to perticular flow. Question here is when i am entering the fedrationId and ...
1
vote
1answer
63 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
1
vote
1answer
32 views

Mutual Authentication without access_token

We have a 3rd Party API that wants to connect to our Salesforce without using 2 factor authentication. They want to post data to Salesforce without asking for "access_token". They want us to enforce ...
0
votes
1answer
53 views

SSO authentication at API level

I am trying to automate a mobile application in my organization which uses SAML based SSO authentication to allow any user to login to the app. What I am trying to achieve is to perform an action in ...
3
votes
1answer
123 views

Using Named Credentials in OAuth 2 authentication (grant_type=password)

I want to get an access token from an external endpoint (HTTP callout to REST API) without hardcoding passwords. The external system expects a request with Oauth 2.0 authentication details provided in ...
0
votes
0answers
35 views

How can I prevent unauthenticated users from downloading an attachment?

I have a community and internal links to attachments. They end with ...servlet/servlet.FileDownload?file={ID} When the user clicks the link, a window.open(fileUrl) is called. This prompts to download....
1
vote
1answer
50 views

Issue logging into Salesforce Workbench with custom domain

Does anyone know why I receive an 'invalid_grant: authentication failure' message when I try signing into Salesforce Workbench using a custom domain when I can sign into the custom domain normally? I ...
0
votes
1answer
56 views

Rest API Salesforce with Certificate

I have a Rest API Service: @HttpPost global static String actualizarAveriaIngenico(String numorden_stu, String numproceso_mant, String estado_averia, String nombre_tecnico, String ...
1
vote
0answers
25 views

Web Server OAUTH flow without user interaction [duplicate]

I am trying to access Salesforce resources , through another application using an integration user. There is no user intervention to click/approve/allow the authentication. All needs to happen through ...
0
votes
0answers
90 views

Authentication error when connecting to the Streaming API

I want to subscribe to PushTopic events from my Open CTI application. But I can't even connect to a cometd server. Help me find the problem with my solution. Or maybe there are other ways to subscribe ...
1
vote
1answer
27 views

Native Mobile App - Authorized by Salesforce - Access Token

We have SSO enabled for our org via ADFS using SAML. The single sign on is working absolutely fine. We have an native tablet app (custom) which has an option to launch Salesforce inside the app (as ...
2
votes
1answer
109 views

How is this possible to use the Salesforce CLI after changing my user's password?

Couple of days ago, when logging in to the Org via browser, I was prompted to update my password. Last time I used Salesforce CLI was 2 weeks ago and today I had to do it again. However, no password ...
1
vote
0answers
32 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
0
votes
2answers
36 views

Is there a way to get new access token when current session get expired without using Connected App?

I have one Customer's Salesforce Application and one .Net Web Service. I also have Connected App in Salesforce which I am using to generate new token. Salesforce Application calls .Net Web Service ...
0
votes
0answers
14 views

How to authenticate REST API without being redirected to the Login page? [duplicate]

I have a Web application on a remote server that needs to send a JSON object(generated on my user's browser) to be stored on my SF object. The problem is that according to the documentation and a few ...
0
votes
1answer
28 views

Can multiple autorization_code co-exist for a single integration user?

I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
2
votes
1answer
57 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...
1
vote
1answer
41 views

Require 2FA outside of Company range

We have been looking at a way to make users authenticate via MFA outside of the company's network range? I was looking at https://success.salesforce.com/answers?id=90630000000hdMQAAY, however, it ...
1
vote
1answer
187 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
1
vote
1answer
89 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
0
votes
0answers
16 views

Vendor App does not work with Salesforce Authenticator

I am trying to explain to a vendor that their app does not work with Salesforce Authenticator. The user opens the app, logs into Salesforce, get told to authenticate, authenticate. Then reopen the ...
0
votes
0answers
33 views

send mass emails from Salesforce using personal emails

We have users who will trigger mass emails to generated leads, child users as a part of their campaign. Till date, it is done using google and we are planning to remove gsuite from our system. When we ...
3
votes
3answers
190 views

Public Salesforce Site and Security Review

Let's face it. Salesforce Communities is expensive and not for everyone out there. I have a customer who wants to create a customer-facing site where non-logged in users can register themselves and ...
2
votes
1answer
583 views

Salesforce REST API: Session expired or invalid: INVALID_SESSION_ID

Background I am trying to access the Salesforce Reporting REST API. public with sharing class SalesforceReportApi { private final static String REPORTS_RESOURCE = '/services/data/v44.0/...
0
votes
1answer
181 views

Authentication Token with apex

I want generate a token, give this token to third-party application, and this app can authentificate into salesforce and call the web service. I want to create an authentication token, call a third ...
1
vote
0answers
135 views

How to store and use named credentials with OAuth

I have read this Where to Store Token Auth? and as far as I understand this, the best way for an OAuth based auth. is to use the named credentials. But I do not get the point how this work. In my ...
2
votes
2answers
121 views

Salesforce Authenticator - We received an unrecognized request

Has anyone seen this error before with the Salesforce Authenticator app? We received an unrecognized request We found a request for a previous installation of the app. We took care of it for ...
2
votes
1answer
115 views

JWT Token always expires after 'exp' provided in the claims

I've tried implementing a JWT Bearer Token Flow. I followed the documentation on here. The code is originally in Java but I managed to adapt it to c# as the code below shows. String header = "...
0
votes
0answers
32 views

OAuth calback to Salesforce after logging to External Identity Provider in Open CTI Softphone

I'm working under our solution of the Softphone using OpenCTI. On start screen in Softphone window, I show with our own OAuth provider login page. After login, the provider redirects to specified ...
2
votes
1answer
212 views

How to access a Per-User Named Credential from Apex

My managed package Apex code is making callouts but I can't use a packaged Named Credential as the user also needs to be able to adjust the endpoint URL not only the username and password. I planned ...