Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

Filter by
Sorted by
Tagged with
1
vote
1answer
14 views

Call Center - Open CTI auth

I'm new to call center so maybe this is a basic question or not very well explained. We have a third party company that needs to use the Open CTI API and connect there System to Salesforce. I gave ...
0
votes
1answer
21 views

Named credentials with POST, url-encoded body and custom grant type for Token generation

Can we use Named credentials against 3rd party with following parameters requirements, which helps us to have access token: Endpoint Method - POST URL encoded body which has following Grant type = ...
0
votes
0answers
18 views

SendGrid - how to authenticate calls to Salesforce [duplicate]

We are integrating Sengrid and Salesforce. SF creates the email and SendGrid sends it. We want to record the delivery status (sent, delivered, opened,..) in SF by updating the EmailMessage object. To ...
0
votes
0answers
21 views

Authenticate to send a GET request to a lighting page

i would like to ask if it is possible to get a token that allows you to receive the html of a lightning or visualforce page given the url. The REST api token doesnt seem to work. For example get the /...
2
votes
1answer
33 views

How can be personalised the standard login/authentication process of salesforce?

I'm trying to understand if is possible to override the standard login/authentication processo of salesforce. I need to add custom logic when is triggered the login/authentication process of ...
1
vote
0answers
31 views

Jenkins Http Request not returning token [closed]

I am trying to communicate through API from Jenkins HTTP request plugin, by passing the parameters in the body like below: "username": "xxx", "password": "xxx", "client_id": "xxx", "...
0
votes
0answers
28 views

Authenticate 3rd party in Salesforce [duplicate]

I have my server in Ruby on Rails. Now I wanted to build an app in the salesforce that will authenticate with my server using auth2.0. All org who have installed my app will have access to their ...
0
votes
0answers
15 views

Connect external application with my Salesforce app

We are developing an external application which will connect to a Salesforce app (also being developed by us) for data integration. Now this Salesforce app can be installed by any organization, so I ...
1
vote
0answers
42 views

Authenticate Community Users in External Rest API

I have a Community that consumes an external Rest API that requires authentication. For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
2answers
30 views

TouchId, FaceId login for mobile Apps

One customer is asking for having the Mobile App authentication for External users sites using Communities with FaceId and TouchId, I have tried "Implementing Screen Locking and PIN protection" in the ...
6
votes
1answer
146 views

Testing Community “Passwordless Login” using the System.UserManagement Class

I am using the UserManagement class to register and login users with just their Email or Phone Number, which I have managed to get working very nicely... I have now also built a small LWC to allow ...
2
votes
1answer
33 views

Prevent Redirect to Login on Salesforce Community External URL

We have a custom PUBLIC community with a signup form. This community does not require login as the point is for the user to sign up. In this signup form, we have built a lightning component+vf page to ...
0
votes
0answers
18 views

AuthConfiguration getSamlSsoUrl method return link doesn't work

So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url. However,...
0
votes
1answer
35 views

Authenticate Calls made to Salesforce webservice [duplicate]

I am using this exact example from trailhead https://trailhead.salesforce.com/en/content/learn/modules/apex_integration_services/apex_integration_webservices @RestResource(urlMapping='/Cases/*') ...
0
votes
1answer
51 views

How to send authorization to web app using Rest API [closed]

This is my first time working with API and I'm trying to understand how to send authentication to an web app using REST API. Questions I have: Do I need to setup Oauth in Salesforce in order to ...
0
votes
1answer
36 views

How could I identify when a user does an operation through data loader? [duplicate]

In our org, we are trying to block some triggers when an account is being updated through data loader. Our strategy was to get the logginHistoryId with getCurrentSession method from the ...
0
votes
3answers
58 views

Unable to login using Frontdoor.jsp

I have a usecase where I need to enable internal users to login to Salesforce using a branded login page. We have built this login page(html) in our website using Angular.js with its own custom ...
2
votes
1answer
67 views

ERROR running force:auth:jwt:grant: Destination URL not reset. The URL returned from login must be set

I'm trying to setup CI/CD with Jenkins for the first time. I already have a valid script running in Bitbucket Pipelines, but now we need to move to the client provided Jenkins server. This is my ...
1
vote
1answer
185 views

What is “Sfdx Auth Url” attribute used for?

Till now, I have been working with SFDX orgs using JWT cert based auth auth:jwt:grantor authenticating using browser using auth:web:login I recently came across the --verbose attribute which gives ...
0
votes
1answer
32 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
0
votes
0answers
20 views

Got a blank screen when connecting with the iOS app?

In the SF iOS app, when I login on certain networks, I get a blank screen. I used the Authenticator app and enabled it in my account first; while on certain networks I can get into it, other ones I ...
2
votes
1answer
68 views

Pardot authentication api not working with correct username and password

I'm having trouble getting the pardot authentication API (v4) working. After triple checking I'm sure I'm using the correct credentials. Making a POST to https://pi.pardot.com/api/login/version/4?...
0
votes
1answer
35 views

How 3rd party should authenticate with custom Apex REST API [closed]

When using @RestResource to create a custom REST API which is exposed externally using a public site. How should the third party service (ESB) authenticate with Salesforce so that it can use the ...
2
votes
3answers
133 views

What method to use in a batch apex in order to get authentication token from a remote server?

I have a batch class that uses query locator to send data into the client's server. however, it must first authenticate and get access token and send that along with the data with all consecutive post ...
1
vote
1answer
80 views

Decode JWT received from /v2/authorize

I'm developing an app for SalesForce Marketing cloud. For the authentication I have a web page loaded as iframe in the salesforce mc; in this page the customer performs the login to my platform. ...
3
votes
1answer
51 views

Is OAuth 2.0 User-Agent Flow truly an Implicit Grant Type?

Is the Salesforce User-Agent Flow truly an "Implicit" grant type? It can most definitely issue a refresh token. And yet per RFC 6749 Section 4.2 Implicit Grant documentation... The implicit grant ...
0
votes
0answers
29 views

Auth Provider for Trello?

I've spent too many hours today trying to set up an Auth Provider + Named Credential for Trello's auth flow... I guess my question is, for those who have dealt with Auth Providers in SFDC, is this ...
0
votes
1answer
93 views

JWT Authentication in salesforce

I am trying to log in another user in my same org using below code. String username = 'test1@salesforce.com'; String jwtVal = '*****'; String tokenEndPoint = System.URL.getSalesforceBaseURL()....
3
votes
1answer
126 views

Apex callout to an OpenID Connect endpoint protected by PKCE code challenge

I'm trying to write Apex code that'll call an external API. The API is using OpenID Connect for authentication, meaning I'll have to first give consent in order to get an authorization code, then ...
12
votes
3answers
3k views

Mavensmate: Getting error client identifier invalid while authentication to salesforce

I use Mavensmate, Since morning it is throwing me an error "client identifier invalid" while refreshing or saving any component (Apex Class, Trigger or any) to Salesforce from Sublime. When I try to ...
0
votes
0answers
51 views

Require 2FA only outside of Trusted IP Ranges, using authenticator app 2FA (e.g. SF Authenticator push notification)

We've decided to use the Salesforce Authenticator app for 2FA for our internal users (reasons below), but want to make the process more convenient by bypassing 2FA when users are logging in from ...
4
votes
1answer
63 views

Determine whether running user is logged in from within Trusted IP Range (from Apex)

I am creating a Login Flow that invokes Apex to do some processing, and need to determine whether the running (logging-in) user is connecting from an IP address whitelisted in our org's Trusted IP ...
0
votes
1answer
84 views

Native Android/iOS Authentication with Authenticated Site/Customer Portal

I am working on integrating a native android and iOS project into a Salesforce environment. We have successfully ran the forcedroid and forceios commands to get functioning projects and have been able ...
0
votes
1answer
51 views

Login Discovery page— Need to provide userId twice for login

i have implemented login discovery page which will ask to enter ferdation id and once fedrationid enters it will redirect to perticular flow. Question here is when i am entering the fedrationId and ...
1
vote
1answer
80 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
1
vote
1answer
34 views

Mutual Authentication without access_token

We have a 3rd Party API that wants to connect to our Salesforce without using 2 factor authentication. They want to post data to Salesforce without asking for "access_token". They want us to enforce ...
0
votes
1answer
64 views

SSO authentication at API level

I am trying to automate a mobile application in my organization which uses SAML based SSO authentication to allow any user to login to the app. What I am trying to achieve is to perform an action in ...
3
votes
1answer
238 views

Using Named Credentials in OAuth 2 authentication (grant_type=password)

I want to get an access token from an external endpoint (HTTP callout to REST API) without hardcoding passwords. The external system expects a request with Oauth 2.0 authentication details provided in ...
0
votes
0answers
41 views

How can I prevent unauthenticated users from downloading an attachment?

I have a community and internal links to attachments. They end with ...servlet/servlet.FileDownload?file={ID} When the user clicks the link, a window.open(fileUrl) is called. This prompts to download....
1
vote
1answer
58 views

Issue logging into Salesforce Workbench with custom domain

Does anyone know why I receive an 'invalid_grant: authentication failure' message when I try signing into Salesforce Workbench using a custom domain when I can sign into the custom domain normally? I ...
0
votes
1answer
99 views

Rest API Salesforce with Certificate

I have a Rest API Service: @HttpPost global static String actualizarAveriaIngenico(String numorden_stu, String numproceso_mant, String estado_averia, String nombre_tecnico, String ...
1
vote
0answers
26 views

Web Server OAUTH flow without user interaction [duplicate]

I am trying to access Salesforce resources , through another application using an integration user. There is no user intervention to click/approve/allow the authentication. All needs to happen through ...
0
votes
0answers
107 views

Authentication error when connecting to the Streaming API

I want to subscribe to PushTopic events from my Open CTI application. But I can't even connect to a cometd server. Help me find the problem with my solution. Or maybe there are other ways to subscribe ...
1
vote
1answer
27 views

Native Mobile App - Authorized by Salesforce - Access Token

We have SSO enabled for our org via ADFS using SAML. The single sign on is working absolutely fine. We have an native tablet app (custom) which has an option to launch Salesforce inside the app (as ...
2
votes
1answer
112 views

How is this possible to use the Salesforce CLI after changing my user's password?

Couple of days ago, when logging in to the Org via browser, I was prompted to update my password. Last time I used Salesforce CLI was 2 weeks ago and today I had to do it again. However, no password ...
1
vote
0answers
37 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
0
votes
2answers
38 views

Is there a way to get new access token when current session get expired without using Connected App?

I have one Customer's Salesforce Application and one .Net Web Service. I also have Connected App in Salesforce which I am using to generate new token. Salesforce Application calls .Net Web Service ...
0
votes
0answers
14 views

How to authenticate REST API without being redirected to the Login page? [duplicate]

I have a Web application on a remote server that needs to send a JSON object(generated on my user's browser) to be stored on my SF object. The problem is that according to the documentation and a few ...
0
votes
1answer
29 views

Can multiple autorization_code co-exist for a single integration user?

I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
2
votes
1answer
65 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...