Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.

2
votes
2answers
428 views

Named Credential - Automatic refresh token does not work with WSO2 Identity server

I am facing an issue with the named credential platform functionality in the following integration scenario: The Salesforce Org is supposed to perform Rest callouts to a 3rd party service. ...
1
vote
1answer
473 views

getAccessToken is returning null when using Microsoft Access Control Source

I have set up OAuth with Sharepoint by following a Salesforce tutorial. When I go to the Test-Only Initialization URL, I am successfully directed through the OAuth process and end up at the Callback ...
1
vote
1answer
17 views

Native Mobile App - Authorized by Salesforce - Access Token

We have SSO enabled for our org via ADFS using SAML. The single sign on is working absolutely fine. We have an native tablet app (custom) which has an option to launch Salesforce inside the app (as ...
2
votes
1answer
101 views

How is this possible to use the Salesforce CLI after changing my user's password?

Couple of days ago, when logging in to the Org via browser, I was prompted to update my password. Last time I used Salesforce CLI was 2 weeks ago and today I had to do it again. However, no password ...
1
vote
0answers
15 views

salesforce managed authentication provider scope

If I create a salesforce managed authentication provider following the steps here: https://help.salesforce.com/articleView?id=sso_provider_global_auth.htm&type=5. I don't want to create a ...
0
votes
2answers
21 views

Is there a way to get new access token when current session get expired without using Connected App?

I have one Customer's Salesforce Application and one .Net Web Service. I also have Connected App in Salesforce which I am using to generate new token. Salesforce Application calls .Net Web Service ...
0
votes
1answer
730 views

OpenID Connect - Bad Response

I've seen a few posts regarding this topic, however they do not appear to solve my issue. I also have a posting on the developer forum. I'm setting up our authentication provider to allow users to ...
0
votes
0answers
12 views

How to authenticate REST API without being redirected to the Login page? [duplicate]

I have a Web application on a remote server that needs to send a JSON object(generated on my user's browser) to be stored on my SF object. The problem is that according to the documentation and a few ...
0
votes
1answer
571 views

Authentication for SOAP requests

According to the documentation (https://code.exacttarget.com/apis-sdks/soap-api/using-the-api-key-to-authenticate-api-calls.html), it says to authentication in SOAP is done by sending the accessToken. ...
4
votes
1answer
379 views

error=redirect_uri_mismatch&error_description=redirect_uri%20must%20match%20configuration

I am connecting two salesforce orgs with connected app, named credential and Auth Provider. I have created connected app in target sandbox. Created Auth Provider in source org by providing Consumer ...
1
vote
1answer
24 views

Require 2FA outside of Company range

We have been looking at a way to make users authenticate via MFA outside of the company's network range? I was looking at https://success.salesforce.com/answers?id=90630000000hdMQAAY, however, it ...
0
votes
1answer
25 views

Can multiple autorization_code co-exist for a single integration user?

I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
2
votes
1answer
45 views

Validate jwt token inbound webservice

We have a requirement to validate jwt tokens for inbound webservices: In Salesforce we will expose some REST WS 3rd party system will call salesforce with a jwt token* in the Authorization header *...
1
vote
1answer
33 views

Expired authorization code and Invalid Nonce errors

We recently launched a mobile app and we use Salesforce Identity Management. ie all customers have a Salesforce user record and authentication is done is Salesforce. After the launch, some users were ...
0
votes
0answers
15 views

Vendor App does not work with Salesforce Authenticator

I am trying to explain to a vendor that their app does not work with Salesforce Authenticator. The user opens the app, logs into Salesforce, get told to authenticate, authenticate. Then reopen the ...
1
vote
1answer
34 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
0
votes
0answers
23 views

send mass emails from Salesforce using personal emails

We have users who will trigger mass emails to generated leads, child users as a part of their campaign. Till date, it is done using google and we are planning to remove gsuite from our system. When we ...
2
votes
1answer
123 views

Salesforce REST API: Session expired or invalid: INVALID_SESSION_ID

Background I am trying to access the Salesforce Reporting REST API. public with sharing class SalesforceReportApi { private final static String REPORTS_RESOURCE = '/services/data/v44.0/...
3
votes
3answers
185 views

Public Salesforce Site and Security Review

Let's face it. Salesforce Communities is expensive and not for everyone out there. I have a customer who wants to create a customer-facing site where non-logged in users can register themselves and ...
8
votes
2answers
529 views

How to delete SSO information?

I have implemented the auth. provider SSO from Facebook. When I disable a user, I want to delete at the same time the authentication information of Facebook(ex. Third-party account link in User ...
1
vote
1answer
34 views

Salesforce Authenticator - We received an unrecognized request

Has anyone seen this error before with the Salesforce Authenticator app? We received an unrecognized request We found a request for a previous installation of the app. We took care of it for ...
0
votes
1answer
60 views

Authentication Token with apex

I want generate a token, give this token to third-party application, and this app can authentificate into salesforce and call the web service. I want to create an authentication token, call a third ...
0
votes
0answers
51 views

How to store and use named credentials with OAuth

I have read this Where to Store Token Auth? and as far as I understand this, the best way for an OAuth based auth. is to use the named credentials. But I do not get the point how this work. In my ...
0
votes
1answer
360 views

Webservice @httpPost method authentication

Quick response on this would be helpful. I'm able to send request body from Workbench as source to my org as destination for creation of records. But what i need is how to perform the same operation ...
2
votes
1answer
47 views

JWT Token always expires after 'exp' provided in the claims

I've tried implementing a JWT Bearer Token Flow. I followed the documentation on here. The code is originally in Java but I managed to adapt it to c# as the code below shows. String header = "...
0
votes
0answers
29 views

OAuth calback to Salesforce after logging to External Identity Provider in Open CTI Softphone

I'm working under our solution of the Softphone using OpenCTI. On start screen in Softphone window, I show with our own OAuth provider login page. After login, the provider redirects to specified ...
2
votes
1answer
80 views

How to access a Per-User Named Credential from Apex

My managed package Apex code is making callouts but I can't use a packaged Named Credential as the user also needs to be able to adjust the endpoint URL not only the username and password. I planned ...
0
votes
1answer
52 views

Login to OpenCTI softphone through the custom auth provider

I'm working under our solution of the Softphone using OpenCTI. Now I need to authenticate our customer's users through our OAuth2 provider. How I understood the best practice for using external ...
1
vote
1answer
80 views

Understanding authentication for Apex SOAP web service

I have read this post: How authentication works in APEX and since the SF documentation is a bit confusing for me at this point I would like to ask: Is it possible to get the session id with a ...
2
votes
1answer
325 views

Error: Janrain authentication

I followed the janrain Auth provider tutorial for social login implementation and getting following error: https://ap1.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError?ErrorCode=...
2
votes
1answer
53 views

Need to call salesforce API from external system [closed]

I am creating an external app, where I need to get the data from Salesforce. I understand the use of Connected apps, and I won't be using the web based OAuth flow where user is redirected to https://...
0
votes
1answer
22 views

How do I redirect users from my website to salesforce community without asking for Login?

I need to redirect my users from my website to the Salesforce community.How can I use their username and password from my website and pass it to Salesforce community so that users are not asked to ...
0
votes
0answers
29 views

Uploading CA-Signed CRT to Salesforce?

I have an existing CA-Signed Certificate (CRT) given to me by my client, and it is needed to be able to make callouts to their external system. I have not found a way to be able to upload a CRT to ...
1
vote
1answer
374 views

Use JSForce to connect with a community/portal user

it possible to connect to sales force with a community license user using jsforce? This is what I have tried let conn = new jsforce.Connection({ loginUrl : 'https://login.salesforce.com' }); ...
1
vote
2answers
454 views

INVALID_SESSION_ID error when external app is calling GETmethod on salesforce

I have created webservice class with Get method. I have created Connected app and I have consumer key and consumer secret.But I don't have knowledge on how to use it. When external app is calling ...
1
vote
1answer
416 views

How to access the context in the canvas app using payload?

Based on the canvas documentation, i have setup the canvas app so that the authentication is OAuth. Also, I have been in the assumption that OAuth flow can be handled entirely through javascript ...
2
votes
1answer
496 views

Named Credential: Authentication process and refresh token

I've begin working with Named Credential and Authentication Provider for the first time and I'm a bit lost on the authentication process and the refresh token functionalities. I'm going to add to my ...
0
votes
0answers
12 views

Authenticate and expose external azure report on an iFrame in Communities

I am trying to figure the best way of doing this. We have a report that gets generated in Azure that has customer details. What needs to happen is, when a customer logs into SF Communities, we ...
0
votes
1answer
424 views

Unable to authenticate with salesforce standard REST API from a different web page using ajax

I want to connect with standard REST API from a different domain using ajax call. Below is the ajax function I am using. function call_API() { $.ajax({ url : URL, ...
1
vote
3answers
73 views

Login to salesforce with oauth 2.0 directly from external app using ajax

I want to be able to login directly from my .net application's login (without having to use the user's security token). And I was wondering if it was possible to send my username and password to the ...
0
votes
2answers
123 views

How to authenticate REST API without going through login page?

I would like to allow end-users that do not have access to Salesforce directly to be able to make orders (a custom object) by submitting a form from a web page. I would have thought making a simple ...
0
votes
1answer
39 views

How to login from external app without using salesforce login redirection?

I want to be able to login via a .NET app using a custom login page on my app so I want no redirection to the salesforce login page. I want the process to be internal.  So how can I implement a way ...
0
votes
1answer
486 views

Username/password authentication curl attempt failture

I'm trying to get an access token using following curl: curl --data grant_type=password&client_id=Y&client_secret=Z&username=A&password=B+C https://login.salesforce.com/services/...
1
vote
0answers
217 views

JSForce Username and password authentication strategy

I'm using the username, password + authcode strategy in a node app to connect to salesforce. I've got a module to connect, and another to login to salesforce. Connect opens the connection and makes ...
0
votes
1answer
27 views

How can I disable IP verification?

I am travelling a lot between end-users, and each time my IP changes SalesForce is asking me to authenticate and a code is sent to my mail. Is there some way I can disable it? Thanks!
5
votes
2answers
3k views

Pros and cons of user-agent flow vs web server flow

After looking into the different OAuth types and reading this question, I'm still confused on the specific pros and cons of user-agent vs web server flows. The best explanation I can find says that ...
0
votes
1answer
52 views

Mutual authentification using named credential

I need to perform 2 way mutual authentification for rest callout using named credential.Under named credential ,I can see a lookup for placing certificate.which certificate can I place under this ?...
0
votes
0answers
25 views

FuelSDK-C# failing while creating a new ETClient

NameValueCollection parameters = new NameValueCollection(); parameters.Add("clientId", this.clientId); parameters.Add("clientSecret", this.clientSecret); parameters.Add("...
0
votes
1answer
26 views

Allow access to a user-type custom object

I have a custom object called 'Advisor' and for every single record, I would like to allow authentication access for that one Advisor to log in and view their record and make changes. For example, ...
5
votes
1answer
3k views

“Unable to resolve request into a Service Provider” return by Salesforce Identity Provider for SAML 2.0 request

I have a Salesforce instance configured to act as an Identity Provider and am trying to connect a (non-Salesforce) Service Provider (client) to it. So we are making a SAML 2.0 samlp:AuthnRequest using ...