Questions tagged [authentication]
Relating to the mechanisms for user authentication and verification. There are many potential approaches to authentication on the salesforce platform.
543
questions
3
votes
1
answer
2k
views
Salesforce REST API Named Credential INVALID_SESSION_ID
I am attempting to call the Salesforce REST API from a Lightning Component. As per their documentation I have set up a named credential using the following settings:
Label: Salesforce REST
Name: ...
- 3,992
4
votes
2
answers
588
views
How do I authorize access to a managed application in another org?
I am working with a managed package that is installed in Org A. The user wants to be able to access information from their other org, Org B, where this package is not installed. The plan is to use ...
- 253
0
votes
1
answer
1k
views
Salesforce "Peer not authenticated" through wso2 SOAP
I am working off the following wso2 documentation wso2 salesforce connector and specifically the configuration shown here. I have successfully imported my certificate into my client-truststore.jks, ...
- 101
2
votes
1
answer
2k
views
How can I avoid Salesforce expiring my password and/or token without warning?
I'm pushing back on the claims I've read that security tokens "only change when user changes the password, or regenerates the token."
My API access stopped working unexpectedly, and I couldn't get ...
- 123
3
votes
1
answer
1k
views
Getting Metadata API server URL when using OAuth flow
I'm trying to interact with Metadata API from Python, for multiple different Salesforce accounts / organizations.
I'm using OAuth flow so nobody needs to give me their username + password, and can ...
- 453
1
vote
0
answers
424
views
OAuth Username and password flow, id URL endpoint accept almost every token
I'm testing (in Postman) a basic username/password flow. I have created Managed App in Salesforce so I have all that I need to invoke token endpoint and get an access token:
So far so good. The ...
- 61
2
votes
1
answer
2k
views
Best way to use session id and user id to authenticate users on external system
I am an ISVforce developer and I am trying to create a managed package for the AppExchange. Our app will make API requests to our external API. Our API requires an authentication token that we ...
- 133
7
votes
3
answers
11k
views
Is it possible to disable Salesforce Authenticator App completely?
Some time ago I had to enable the MyDomain Feature in order to enable custom lightning components on a Sandbox-Org as described here. Until that the two factor authentication was working with password ...
- 28.4k
1
vote
2
answers
13k
views
UserName and Password in Request body of apex callout using Named Credentials
I am able to make an apex callout by passing the username and password in the request body.
String endpoint='https://xyz...com/';
String userID='xyz';
String password='pass';
String jsonBody ='userID=...
- 4,791
2
votes
0
answers
189
views
SalesForce permanent access token key generation
I'm trying to pull SF records into Sql server using SSIS ETL tools. For that I'm using the SF authentication with valid credentials but SF credentials expires every 12 hrs and I've to again generate ...
- 31
0
votes
1
answer
24
views
Is there any way to provide secondary level authentication?
I have a requirement to provide secondary level of authentication. I have one salesforce user and I distributed it to five of my team members. First they login with Salesforce user name password after ...
- 694
0
votes
1
answer
927
views
Username/password authentication curl attempt failture
I'm trying to get an access token using following curl:
curl --data grant_type=password&client_id=Y&client_secret=Z&username=A&password=B+C
https://login.salesforce.com/services/...
- 101
1
vote
1
answer
1k
views
Is Digital Signature mandatory for the oauth JWT token flow?
Is Digital Signature mandatory for the oauth JWT token flow ? If not, how do I implement the flow without the certificate.A web server is supposed to send a request for the access token and I need to ...
- 11
0
votes
2
answers
550
views
The impending TLS upgrade
I have been working on a project in which I utilised the following php library in order to push data to Salesforce using the REST API.
https://github.com/gmo/salesforce-rest-api
Everything was ...
- 121
3
votes
1
answer
20k
views
Using basic http authentication to authorize connection
I am trying to make a login to an external salesforce org from my salesforce org. Below is the code using basic authentication but I get an error:
HttpRequest req = new HttpRequest();
req.setEndpoint(...
- 4,791
0
votes
1
answer
669
views
Salesforce SSO for a group of users
I've implemented SSO with Active Directory, for now all users going into LDAP and then they can access Salesforce. Is there a way to select a group of users to login in the regular page with ...
- 1,279
1
vote
0
answers
136
views
Web Service Connector with two-way SSL enabled
In our java application we use Web Service Connector framework (WSC) to communicate with Salesforce (https://github.com/forcedotcom/wsc).
We successfuly connected with one-way authentication (server-...
- 11
1
vote
1
answer
606
views
CA-signed Certificate: What URL (Common Name)
I'm trying to set up mutual authentication with a third-party. I want to create a new CA signed certificate but I don't know what URL I should use. Testing from our sandbox.
- 257
3
votes
0
answers
49
views
What Oauth2 flow to choose for this particular situation? [closed]
I have a single page app (call it Collector) on my server and would like my users to have a customizable list of links like :
facebook.com/get_my_latest_posts_about_cats
github.com/...
- 131
0
votes
1
answer
343
views
Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client
Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl).
Actually in one of my project we have exposed some api to external system ...
- 257
1
vote
1
answer
2k
views
Self Singed Certificate for Mutual TLS
I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
- 257
3
votes
1
answer
1k
views
Java Desktop App To Login Salesforce
Could someone please guide us how can we implement the auth flow for our app to be able to login to any Salesforce org and not be tied up to a specific org ?
I am interested to implement same ...
- 389
0
votes
1
answer
752
views
2 Factor Authentication is not being triggered with Single Sign On (OpenID Connect)
Testing SSO against Azure AD using openId connect per this developer.force.com documentation
Two-factor authentication is already configured and functions properly for username + password login.
...
- 4,527
0
votes
1
answer
132
views
Salesforce required to store server certificate
Do i need to upload server certificate in Salesforce to trust the server while connecting in 2 way ssl?
Thanks,
- 257
0
votes
1
answer
494
views
2 way ssl configuration at salesforce side
Do we need to upload any server certificate or any other configuration while sending api request in 2 way ssl?
Here i wanted to understand that what all i need to do to setup mutual SSL/TLS where ...
- 257
2
votes
1
answer
3k
views
Creating keystore file from certificate
I have a .crt file shared with my client but when i converted it into .jks format and try importing it into salesforce under Certificate and Key Management it gives me below error:
Error: No ...
- 257
4
votes
1
answer
1k
views
Cant log user out of Salesforce when using Azure SSO with OpenId Connect
I've successfully tested SSO login against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses OpenID Connect.
However, I've been unable to successfully log ...
- 4,527
1
vote
0
answers
218
views
Custom login/registration pages for force.com site
Hello! I am developing a website as an online shop, and I encountered a problem with login and registration. I created portal with Authenticated Website license, which is assigned to site. I enable ...
- 193
0
votes
0
answers
333
views
Implementing Identity Server 3 as Auth. Provider for Salesforce
Has anybody tried implementing an Identity Server 3 as an Auth. Provider in Salesforce?
We're trying to use Windows Authentication without using ADFS in the Single Sign-On Settings in Salesforce. It'...
- 45
1
vote
0
answers
1k
views
Connection reset by peer while implementing Mutual Authentication
We have enabled Mutual Authentication in our system.
We are facing some issues while external system is trying to connect.
Below is the error details when we tried to handshake.
The connection from ...
- 317
1
vote
1
answer
225
views
Authenticate and post in a single call
Is it possible to authenticate to Salesforce and submit a payload to POST method of an apex class exposed as REST resource, all in a single call? I know this usually need 2 different calls, first to ...
- 61
2
votes
1
answer
1k
views
Avoid Credential in Apex REST Callout Code
In my current implementation of an Apex REST callout code to external system , I have to set an endpoint using a Named credentials-NAMED_CRED. The Named
Credential has an endpoint like -
https://...
- 4,791
5
votes
1
answer
654
views
Is there a better way to do two-factor authentication?
I recently got an order from my manager to turn on two-factor authentication on all our databases, so I have enabled "Two-Factor Authentication for User Interface Logins" and assigned the permission ...
- 189
10
votes
3
answers
6k
views
Pros and cons of user-agent flow vs web server flow
After looking into the different OAuth types and reading this question, I'm still confused on the specific pros and cons of user-agent vs web server flows.
The best explanation I can find says that ...
- 1,087
2
votes
1
answer
1k
views
Allow external website authenticated users to access customer community
We have a new customer self service community that we're trying to integrate with our existing external website.
Is there a way to allow users access to community and access cases and knowledgebase ...
- 23
0
votes
1
answer
46
views
Can a standard user reach a community without authentication?
So I have a community that can be accessed by users in my org. I want to have them access it without having to login to the community, and just via a button click, on the same session. Is this ...
- 316
0
votes
1
answer
221
views
Community authorization without reloading page
I have a community page with angular js implemented. It is a SPA as expected.
Angular calls the apex remote action methods receives a response and does some UI stuff.
First page(main page) is ...
- 900
0
votes
0
answers
87
views
Authenticate user to Salesforce based on pre Desktop authentication
I am using OpenID connect flow to authenticate to Salesforce community using a third party Identity provider service. I have configured all settings in Salesforce and it is working fine when initiated:...
- 2,419
1
vote
1
answer
249
views
Build Login for semi public access
So I am building a site in salesforce, this site needs to be accessed by a users with a login. Would it be possible to build a visualforce login page that links to an object where credential details ...
- 111
3
votes
1
answer
2k
views
Using the Rest API using HTTP basic authentication without a connected app
I have been trying to find the different ways to authenticate to use the REST API and I have so far found that OAuth 2.0 is the only way to do it.
As I understand it, you need to have registered a ...
- 31
0
votes
1
answer
1k
views
SalesForce Session ID in Single Sign-on (SAML) environment
We are evaluating accessing SalesForce services from our custom portal. We even investigate implementing SAML based SSO to simplify login to both systems. However, to create new records in SalesForce ...
- 153
0
votes
1
answer
2k
views
Create record on behalf of another user
In our custom portal we would like to offer users to create new records in SalesForce database without leaving the portal.
Is it somehow possible to create these items by admin and just specify the ...
- 153
2
votes
1
answer
1k
views
Multi-Provider Single Sign-on - additional login page and buttons shows up
I have Multi-Provider Single Sign-on configured on my org, result of this is an additional button appearing on the login page as below. I wasn't expecting that, thought that user will be automatically ...
- 355
4
votes
1
answer
984
views
Trying to Authenticate using Username/Password Flow not working
really hoping someone can get me track here as this is really holding me up. Thank you for reading...
I have a SF Dev account and am trying to learn how to create a basic integration to gather ...
- 143
3
votes
1
answer
1k
views
Use JSForce to connect with a community/portal user
it possible to connect to sales force with a community license user using jsforce?
This is what I have tried
let conn = new jsforce.Connection({
loginUrl : 'https://login.salesforce.com'
});
...
- 131
0
votes
1
answer
52
views
Javascrip HTTP Post and Oauth 2.0
I am trying to query a field in visual force page using Javascrip and HTTP Requests (Rest API OAUTH 2.0). But I am not sure how I can get the access Token or the Bearer automatically after every time ...
- 709
5
votes
1
answer
3k
views
Named Credentials: How to Start OAuth flow?
I'm using Named Credentials with OAuth authentication. When calling a method on the endpoint, my Apex app receives back the status that the token needs to be refreshed.
How do I tell Salesforce to ...
- 237
1
vote
1
answer
233
views
Authenticating REST Users
I'm working on extenral service that will use REST API.
The service will make a login to Salesgforce every day and will run REST queries.
From this article, it seems that I need to use OAuth2 - ...
- 97
4
votes
1
answer
280
views
Tie web server oauth to user session in my canvas app
I'm trying to figure out how to allow my users to login to my app using only Salesforce. I think I want to use the "web server oauth flow" and follow the directions in the solution here:
https://...
- 673
1
vote
3
answers
1k
views
Bulk API Rejects Seemingly Valid Session ID
I am working with a sandbox account trying to make calls to the Bulk API. This code has worked before but right now I am getting this error back when I attempt to create a new Job.
<?xml version="...
- 111