Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

1
vote
1answer
17 views

Native Mobile App - Authorized by Salesforce - Access Token

We have SSO enabled for our org via ADFS using SAML. The single sign on is working absolutely fine. We have an native tablet app (custom) which has an option to launch Salesforce inside the app (as ...
2
votes
1answer
101 views

How is this possible to use the Salesforce CLI after changing my user's password?

Couple of days ago, when logging in to the Org via browser, I was prompted to update my password. Last time I used Salesforce CLI was 2 weeks ago and today I had to do it again. However, no password ...
1
vote
0answers
15 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
0
votes
2answers
21 views

Is there a way to get new access token when current session get expired without using Connected App?

I have one Customer's Salesforce Application and one .Net Web Service. I also have Connected App in Salesforce which I am using to generate new token. Salesforce Application calls .Net Web Service ...
0
votes
0answers
12 views

How to authenticate REST API without being redirected to the Login page? [duplicate]

I have a Web application on a remote server that needs to send a JSON object(generated on my user's browser) to be stored on my SF object. The problem is that according to the documentation and a few ...
0
votes
1answer
25 views

Can multiple autorization_code co-exist for a single integration user?

I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
2
votes
1answer
45 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...
1
vote
1answer
24 views

Require 2FA outside of Company range

We have been looking at a way to make users authenticate via MFA outside of the company's network range? I was looking at https://success.salesforce.com/answers?id=90630000000hdMQAAY, however, it ...
1
vote
1answer
33 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
1
vote
1answer
34 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
0
votes
0answers
15 views

Vendor App does not work with Salesforce Authenticator

I am trying to explain to a vendor that their app does not work with Salesforce Authenticator. The user opens the app, logs into Salesforce, get told to authenticate, authenticate. Then reopen the ...
0
votes
0answers
23 views

send mass emails from Salesforce using personal emails

We have users who will trigger mass emails to generated leads, child users as a part of their campaign. Till date, it is done using google and we are planning to remove gsuite from our system. When we ...
3
votes
3answers
185 views

Public Salesforce Site and Security Review

Let's face it. Salesforce Communities is expensive and not for everyone out there. I have a customer who wants to create a customer-facing site where non-logged in users can register themselves and ...
2
votes
1answer
121 views

Salesforce REST API: Session expired or invalid: INVALID_SESSION_ID

Background I am trying to access the Salesforce Reporting REST API. public with sharing class SalesforceReportApi { private final static String REPORTS_RESOURCE = '/services/data/v44.0/...
0
votes
1answer
60 views

Authentication Token with apex

I want generate a token, give this token to third-party application, and this app can authentificate into salesforce and call the web service. I want to create an authentication token, call a third ...
0
votes
0answers
51 views

How to store and use named credentials with OAuth

I have read this Where to Store Token Auth? and as far as I understand this, the best way for an OAuth based auth. is to use the named credentials. But I do not get the point how this work. In my ...
1
vote
1answer
34 views

Salesforce Authenticator - We received an unrecognized request

Has anyone seen this error before with the Salesforce Authenticator app? We received an unrecognized request We found a request for a previous installation of the app. We took care of it for ...
2
votes
1answer
47 views

JWT Token always expires after 'exp' provided in the claims

I've tried implementing a JWT Bearer Token Flow. I followed the documentation on here. The code is originally in Java but I managed to adapt it to c# as the code below shows. String header = "...
0
votes
0answers
29 views

OAuth calback to Salesforce after logging to External Identity Provider in Open CTI Softphone

I'm working under our solution of the Softphone using OpenCTI. On start screen in Softphone window, I show with our own OAuth provider login page. After login, the provider redirects to specified ...
2
votes
1answer
80 views

How to access a Per-User Named Credential from Apex

My managed package Apex code is making callouts but I can't use a packaged Named Credential as the user also needs to be able to adjust the endpoint URL not only the username and password. I planned ...
0
votes
1answer
52 views

Login to OpenCTI softphone through the custom auth provider

I'm working under our solution of the Softphone using OpenCTI. Now I need to authenticate our customer's users through our OAuth2 provider. How I understood the best practice for using external ...
1
vote
1answer
79 views

Understanding authentication for Apex SOAP web service

I have read this post: How authentication works in APEX and since the SF documentation is a bit confusing for me at this point I would like to ask: Is it possible to get the session id with a ...
2
votes
1answer
53 views

Need to call salesforce API from external system [closed]

I am creating an external app, where I need to get the data from Salesforce. I understand the use of Connected apps, and I won't be using the web based OAuth flow where user is redirected to https://...
0
votes
1answer
22 views

How do I redirect users from my website to salesforce community without asking for Login?

I need to redirect my users from my website to the Salesforce community.How can I use their username and password from my website and pass it to Salesforce community so that users are not asked to ...
0
votes
0answers
29 views

Uploading CA-Signed CRT to Salesforce?

I have an existing CA-Signed Certificate (CRT) given to me by my client, and it is needed to be able to make callouts to their external system. I have not found a way to be able to upload a CRT to ...
0
votes
0answers
12 views

Authenticate and expose external azure report on an iFrame in Communities

I am trying to figure the best way of doing this. We have a report that gets generated in Azure that has customer details. What needs to happen is, when a customer logs into SF Communities, we ...
1
vote
3answers
73 views

Login to salesforce with oauth 2.0 directly from external app using ajax

I want to be able to login directly from my .net application's login (without having to use the user's security token). And I was wondering if it was possible to send my username and password to the ...
0
votes
1answer
39 views

How to login from external app without using salesforce login redirection?

I want to be able to login via a .NET app using a custom login page on my app so I want no redirection to the salesforce login page. I want the process to be internal.  So how can I implement a way ...
0
votes
2answers
123 views

How to authenticate REST API without going through login page?

I would like to allow end-users that do not have access to Salesforce directly to be able to make orders (a custom object) by submitting a form from a web page. I would have thought making a simple ...
0
votes
1answer
27 views

How can I disable IP verification?

I am travelling a lot between end-users, and each time my IP changes SalesForce is asking me to authenticate and a code is sent to my mail. Is there some way I can disable it? Thanks!
0
votes
1answer
52 views

Mutual authentification using named credential

I need to perform 2 way mutual authentification for rest callout using named credential.Under named credential ,I can see a lookup for placing certificate.which certificate can I place under this ?...
0
votes
0answers
25 views

FuelSDK-C# failing while creating a new ETClient

NameValueCollection parameters = new NameValueCollection(); parameters.Add("clientId", this.clientId); parameters.Add("clientSecret", this.clientSecret); parameters.Add("...
0
votes
1answer
26 views

Allow access to a user-type custom object

I have a custom object called 'Advisor' and for every single record, I would like to allow authentication access for that one Advisor to log in and view their record and make changes. For example, ...
5
votes
0answers
114 views

Authorize into developer Sandbox using JWT

I am attempting to authorize a developer Sandbox using JWT in an attempt to implement a CI process. I found this related question on the subject: Can I connect to a sandbox using JWT Flow and Prod ...
0
votes
0answers
29 views

How is this Authentication Option called and how can I implement it?

Recently I was working within my Salesforce Sandbox and when I switched to the Sandbox version of the application, Field Service Lightning, the authentication platform below appeared. I'm interested ...
0
votes
0answers
18 views

Change landing app in lightning

Use Case: Our org have users coming from 2 sources using SSO. There are some common users between these sources. If user is coming from Source A, lets say landing app after SSO should be "Sales" and ...
0
votes
0answers
238 views

400 bad request / invalid_grant occurs every other auth attempt

I'm having some strange behavior while using the OWIN Auth providers package for C# . When I make my first attempt to authenticate, I can see a 400 error in fiddler: 46 {"error":"invalid_grant","...
3
votes
1answer
418 views

REST API OAuth2 CORS Issue

Problem: I have a separate app, from which I want to allow the user to authorize sharing data with Salesforce. The user clicks a button on the site, which executes a Javascript function that makes a ...
0
votes
1answer
569 views

OAuth 2 Client Credentials - Missing 'grant_type' & Length Required

Trying to connect to an endpoint to receive a token back. Http http = new Http(); httpRequest request = new httpRequest(); request.setHeader('grant_type', 'client_credentials'); request.setHeader('...
3
votes
1answer
157 views

Custom OAuth Auth Provider

I have a Rest API Endpoint that I am looking to callout to. Something like this: https://myrestservice.com/service/logs When setting up the Named Credential, I set up the URL to: https://...
1
vote
0answers
27 views

Is Salesforce 2FA supported using only SMS or Email and not the Authenticator Application?

I am trying to do two-factor authentication via email or SMS. 2FA via the authenticator app isn't an option as we cannot install anything on user phones. Native Identify Verification codes would work ...
3
votes
1answer
46 views

Authentication options for community users (not in Active Directory)

We need to authenticate users to Salesforce Community using internal app login which cannot support SAML or OpenID. Is there any other solution available? Is "custom authentication provider" the only ...
2
votes
1answer
125 views

Can I re-use a session ID outside of Salesforce?

I have an app that lives outside of salesforce on my own servers. I am going to link to it from within a different app that is already in Salesforce. Ideally I don't want the user to have to login ...
4
votes
0answers
67 views

What is the proper approach for deploying custom Auth. Provider in Salesforce DX?

I have a custom Auth. Provider and a couple of Named Credential which use it. The auth. provider metadata requires "Execute As" field which is represented as username in metadata and as you know, ...
1
vote
2answers
155 views

Salesforce SSO - unique usernames needed between Sandbox and prod environment?

Our team is trying Salesforce and we have a sandbox and a production Salesforce. To use SSO (Okta) are we able to use same SSO login to both environments? Because email address to my knowledge has to ...
2
votes
1answer
78 views

Authenticated Oauth workflow required constant login

I am very new to the Salesforce API. I am creating a library which connects to Salesforce and accesses data etc. I am implementing the Web Server Oauth Authentication workflow (https://developer....
0
votes
1answer
17 views

Do we need separate authentication grant to access different salesforce object?

We have a soql query which we run against the api that works on User object Select Id,Name from User; we are trying to enhance the query to retrieve the profile.name and role.name using the same ...
1
vote
2answers
28 views

Leveraging Salesforce Authentication

I'm looking to leverage Salesforce Authentication for my website. Essentially I'd like the user to be able to enter their username/password, have that validated by Salesforce, and then be able to ...
5
votes
0answers
309 views

Named credential does not work with client credentials

I have read the full documentation and have few questions on how named credential works. I have written a custom provider like this: /** * Description of the class * <p /><p /> * @...
0
votes
0answers
47 views

Login as a community user with API

We're developing an feature which allows a user to login to the community page seamless. For example, We will generate a very secured token. We want to auto-login the current user, once the user ...